Known vulnerabilities in Ubuntu 24.10 - page 15

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 2070
Public exploits: 41
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.10 Ubuntu 24.10 is affected by 2070 vulnerabilities: 9 critical, 127 high, 238 medium, 1695 low Critical High Medium Low

Vulnerabilities (2070)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110203 - Improper input validation
CVE-2025-48432		 CWE-20 Medium
No
No
 - 04.06.2025 SB2025060452
SB2025060831
SB2025060832
and 18 more
#VU109944 - NULL Pointer Dereference
CVE-2025-4476		 CWE-476 Medium
No
No
 - 29.05.2025 SB2025052993
SB20250529157
SB2025053009
and 14 more
#VU109870 - Use After Free
CVE-2025-5283		 CWE-416 Medium
No
No
 - 27.05.2025 SB2025052766
SB2025052901
SB20250529172
and 22 more
#VU109846 - Allocation of Resources Without Limits or Throttling
CVE-2025-47287		 CWE-770 Medium
No
No
 - 27.05.2025 SB2025052726
SB2025052727
SB2025052728
and 30 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 - 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU109833 - Interpretation Conflict
CVE-2025-32908		 CWE-436 High
No
No
 - 27.05.2025 SB2025052714
SB2025052723
SB20250529121
and 6 more
#VU109427 - Uncaught Exception
CVE-2025-20054		 CWE-248 Low
No
No
 - 19.05.2025 SB2025051949
SB2025051953
SB2025051954
and 10 more
#VU109426 - Resource Management Errors
CVE-2025-20103		 CWE-399 Low
No
No
 - 19.05.2025 SB2025051949
SB2025051953
SB2025051954
and 9 more
#VU109425 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45332		 CWE-200 Low
No
No
 - 19.05.2025 SB2025051947
SB2025051953
SB2025051954
and 12 more
#VU109424 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20623		 CWE-200 Low
No
No
 - 19.05.2025 SB2025051947
SB2025051953
SB2025051954
and 10 more
#VU109423 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43420		 CWE-200 Low
No
No
 - 19.05.2025 SB2025051947
SB2025051953
SB2025051954
and 11 more
#VU109171 - Incorrect Behavior Order
CVE-2025-20012		 CWE-696 Low
No
No
 - 14.05.2025 SB2025051436
SB2025051953
SB2025051954
and 14 more
#VU109169 - Missing initialization of resource
CVE-2025-24495		 CWE-909 Low
No
No
 - 14.05.2025 SB2025051436
SB2025051953
SB2025051954
and 13 more
#VU109000 - Resource Management Errors
CVE-2024-28956		 CWE-399 High
No
No
 - 13.05.2025 SB2025051308
SB2025051309
SB2025051320
and 46 more
#VU107628 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-2312		 CWE-497 Low
No
No
 - 22.04.2025 SB2025042204
SB2025042205
SB2025042216
and 39 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Public exploit available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU102072 - Protection Mechanism Failure
CVE-2024-45411		 CWE-693 High
No
No
 - 30.12.2024 SB2024123097
SB20241230139
SB2025021858
and 1 more
#VU97689 -
CVE-2024-6531		 Medium
No
No
 - 25.09.2024 SB2024092513
SB2024121139
SB2025031910
and 7 more
#VU97688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6485		 CWE-79 Medium
No
No
 - 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484		 CWE-79 Medium
No
No
 - 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more


Showing elements 281 - 300 out of 2070