Known vulnerabilities in Ubuntu 24.10 - page 2

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 2070
Public exploits: 41
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.10 Ubuntu 24.10 is affected by 2070 vulnerabilities: 9 critical, 127 high, 238 medium, 1695 low Critical High Medium Low

Vulnerabilities (2070)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112639 - Memory corruption
CVE-2025-48386		 CWE-119 High
No
No
 - 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 12 more
#VU112638 - Improper input validation
CVE-2025-48385		 CWE-20 High
No
No
 - 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112142 - Improper Handling of Case Sensitivity
CVE-2024-6866		 CWE-178 Medium
No
No
 - 03.07.2025 SB2025070336
SB2025070342
SB2025080147
and 6 more
#VU112141 - Improper input validation
CVE-2024-6844		 CWE-20
No
No
 - 03.07.2025 SB2025070336
SB2025070342
SB2025080147
and 6 more
#VU112140 - Security Features
CVE-2024-6839		 CWE-254 Medium
No
No
 - 03.07.2025 SB2025070336
SB2025070342
SB2025080147
and 6 more
#VU112067 - Protection Mechanism Failure
CVE-2025-32462		 CWE-693 Low
Public exploit available
No
 - 01.07.2025 SB2025070109
SB2025070111
SB2025070112
and 42 more
#VU112066 - Protection Mechanism Failure
CVE-2025-32463		 CWE-693 Low
Public exploit available
Exploited
 - 01.07.2025 SB2025070109
SB2025070182
SB2025070238
and 6 more
#VU112028 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2011-10007		 CWE-78 Low
No
No
 - 27.06.2025 SB2025062782
SB2025062783
SB2025062784
and 20 more
#VU111271 - Out-of-bounds read
CVE-2025-20234		 CWE-125 High
No
No
 - 18.06.2025 SB2025061842
SB2025061845
SB20250620165
and 6 more
#VU111270 - Out-of-bounds write
CVE-2025-20260		 CWE-787 Critical
No
No
 - 18.06.2025 SB2025061842
SB20250620165
SB20250620166
and 11 more
#VU109790 - Cleartext Storage of Sensitive Information
CVE-2025-48708		 CWE-312 Medium
Public exploit available
No
 - 24.05.2025 SB2025052401
SB2025052402
SB2025052754
and 7 more
#VU107772 - Resource Management Errors
CVE-2025-39778		 CWE-399 Low
No
No
 - 22.04.2025 SB20250422151
SB2025062462
SB2025062655
and 5 more
#VU107684 - Out-of-bounds read
CVE-2025-39735		 CWE-125 Low
No
No
 - 22.04.2025 SB2025042262
SB2025042801
SB2025061637
and 45 more
#VU107682 - Out-of-bounds read
CVE-2025-40114		 CWE-125 Low
No
No
 - 22.04.2025 SB2025042260
SB2025062462
SB2025062655
and 15 more
#VU107646 - Missing release of memory after effective lifetime
CVE-2025-39989		 CWE-401 Low
No
No
 - 22.04.2025 SB2025042224
SB2025062462
SB2025062655
and 25 more
#VU101965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-39327		 CWE-835 Low
No
No
 - 27.12.2024 SB2024122753
SB2025021860
SB2025021865
and 4 more
#VU96730 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6221		 CWE-200 Medium
No
No
 - 03.09.2024 SB2024090356
SB2024092768
SB2024100968
and 5 more
#VU94747 - Improper Output Neutralization for Logs
CVE-2024-1681		 CWE-117 Medium
No
No
 - 26.07.2024 SB2024072606
SB2024072607
SB2024072610
and 7 more
#VU93815 - Heap-based Buffer Overflow
CVE-2024-29508		 CWE-122 High
No
No
 - 05.07.2024 SB2024070521
SB2024071535
SB20240717141
and 13 more
#VU92102 - Uncontrolled Search Path Element
CVE-2024-33871		 CWE-427 High
No
No
 - 13.06.2024 SB20240613135
SB20240613136
SB2024061422
and 28 more


Showing elements 21 - 40 out of 2070