Known vulnerabilities in Ubuntu 25.10

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1518
Public exploits: 49
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1518 vulnerabilities: 9 critical, 115 high, 450 medium, 943 low Critical High Medium Low

Vulnerabilities (1518)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198		 CWE-1286 High
No
No
 - 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199		 CWE-130 Medium
No
No
 - 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU139114 - Heap-based Buffer Overflow
CVE-2026-34743		 CWE-122 Medium
No
No
 - 22.07.2026 SB2026072263
SB2026072264
SB2026072265
and 6 more
#VU138393 - Command injection
CVE-2026-9277		 CWE-77 High
No
No
 - 20.07.2026 SB2026072009
SB2026072011
SB20260720386
and 4 more
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142		 CWE-770 Medium
No
No
 - 26.06.2026 SB2026062683
SB2026072474
#VU135080 - Improper Validation of Certificate with Host Mismatch
CVE-2026-12064		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 2 more
#VU135074 - Allocation of Resources Without Limits or Throttling
CVE-2026-11586		 CWE-770 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026071429
#VU135073 - Improper Certificate Validation
CVE-2026-11564		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026071429
#VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-11352		 CWE-835 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026071429
#VU135070 - Use After Free
CVE-2026-10536		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 2 more
#VU131986 - Out-of-bounds read
CVE-2026-48029		 CWE-125 Medium
No
No
 - 20.05.2026 SB2026052069
SB2026072474
#VU131972 - Integer overflow
CVE-2026-47714		 CWE-190 Medium
No
No
 - 20.05.2026 SB2026052069
SB20260715102
SB2026072474
#VU131963 - Out-of-bounds read
CVE-2026-47254		 CWE-125 Medium
No
No
 - 20.05.2026 SB2026052069
SB2026072474
#VU131958 - NULL Pointer Dereference
CVE-2026-47709		 CWE-476 Medium
No
No
 - 20.05.2026 SB2026052069
SB20260715102
SB2026072474
#VU130545 - Heap-based Buffer Overflow
CVE-2026-43185		 CWE-122 High
No
No
 - 07.05.2026 SB20260507156
SB20260715104
SB20260715105
and 8 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 - 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 - 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 107 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 - 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096		 CWE-295 Low
No
No
 - 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU87746 - Improper Authorization
CVE-2021-47154		 CWE-285 Medium
No
No
 - 22.03.2024 SB2024032269
SB2024032274
SB2024032275
and 5 more


Showing elements 1 - 20 out of 1518