Known vulnerabilities in Ubuntu 25.10 - page 13

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132340 - Improper Access Control
CVE-2026-1933		 CWE-284 Low
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052711
and 11 more
#VU132341 - Improper Access Control
CVE-2026-2340		 CWE-284 Low
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012		 CWE-295 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238		 CWE-476 Medium
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408		 CWE-77 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480		 CWE-77 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU132128 - Argument Injection or Modification
CVE-2026-46529		 CWE-88 High
Public exploit available
No
 - 22.05.2026 SB2026052222
SB2026052223
SB2026052224
and 18 more
#VU131454 - Missing Authorization
CVE-2026-6472		 CWE-862 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 27 more
#VU131455 - Integer overflow
CVE-2026-6473		 CWE-190 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 55 more
#VU131456 - Use of Externally-Controlled Format String
CVE-2026-6474		 CWE-134 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 26 more
#VU131457 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-6475		 CWE-59 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 43 more
#VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-6476		 CWE-89 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB2026051852
and 7 more
#VU131459 - Stack-based buffer overflow
CVE-2026-6477		 CWE-121 High
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 51 more
#VU131460 - Information Exposure Through Timing Discrepancy
CVE-2026-6478		 CWE-208 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 50 more
#VU131461 - Uncontrolled Recursion
CVE-2026-6479		 CWE-674 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 29 more
#VU131462 - Out-of-bounds read
CVE-2026-6575		 CWE-125 Low
No
No
 - 14.05.2026 SB20260514106
SB2026051853
SB2026051854
and 3 more
#VU131463 - Stack-based buffer overflow
CVE-2026-6637		 CWE-121 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 29 more
#VU131346 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42899		 CWE-835 Medium
No
No
 - 13.05.2026 SB2026051375
SB2026051478
SB2026051479
and 15 more
#VU131184 - Memory corruption
CVE-2026-40170		 CWE-119 High
No
No
 - 12.05.2026 SB2026051282
SB2026051284
SB2026051285
and 5 more
#VU124916 - Use After Free
CVE-2026-23454		 CWE-416 Low
No
No
 - 06.04.2026 SB2026040674
SB20260513116
SB2026051411
and 29 more


Showing elements 241 - 260 out of 1520