Known vulnerabilities in Ubuntu 24.04 - page 640

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 14234
Public exploits: 164
Known exploited (KEV): 36

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 14234 vulnerabilities: 25 critical, 567 high, 2043 medium, 11598 low Critical High Medium Low

Vulnerabilities (14234)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130190 - Improper input validation
CVE-2026-5766		 CWE-20 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192		 CWE-384 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907		 CWE-525 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU128473 - Improper input validation
CVE-2026-35386		 CWE-20 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU128474 - Improper Access Control
CVE-2026-35414		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 25 more
#VU128476 - Improper Access Control
CVE-2026-35387		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 18 more
#VU128477 - Improper Authorization
CVE-2026-35388		 CWE-285 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 19 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873		 CWE-319 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU122451 - Protection Mechanism Failure
CVE-2026-25916		 CWE-693 Medium
Public exploit available
No
 - 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU122450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26079		 CWE-79 Medium
No
No
 - 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 - 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU95308 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42010		 CWE-200 Medium
Public exploit available
No
 - 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU95299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-42008		 CWE-79 Low
Public exploit available
No
 - 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356		 CWE-79 Medium
No
No
 - 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more


Showing elements 12781 - 12800 out of 14234