Known vulnerabilities in Ubuntu 25.10 - page 18

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131017 - Improper input validation
CVE-2026-1837		 CWE-20 Medium
No
No
 - 12.05.2026 SB2026051205
SB2026051215
SB2026051216
and 3 more
#VU129542 - Out-of-bounds read
CVE-2026-33857		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 25 more
#VU129543 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-33523		 CWE-113 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 19 more
#VU129544 - NULL Pointer Dereference
CVE-2026-33007		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 17 more
#VU129545 - Information Exposure Through Timing Discrepancy
CVE-2026-33006		 CWE-208 High
Public exploit available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU129546 - NULL Pointer Dereference
CVE-2026-29169		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 14 more
#VU129547 - Allocation of Resources Without Limits or Throttling
CVE-2026-29168		 CWE-770 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051103
and 17 more
#VU129548 - Heap-based Buffer Overflow
CVE-2026-28780		 CWE-122 High
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051101
and 25 more
#VU129549 - Improper Access Control
CVE-2026-24072		 CWE-284 Low
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 19 more
#VU129550 - Double Free
CVE-2026-23918		 CWE-415 High
Public exploit available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU126870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41411		 CWE-78 Medium
No
No
 - 22.04.2026 SB20260422223
SB2026050840
SB20260509158
and 16 more
#VU125602 - Use After Free
CVE-2026-34757		 CWE-416 Low
No
No
 - 09.04.2026 SB2026040960
SB2026042128
SB20260422224
and 12 more
#VU125601 - Use After Free
CVE-2026-33416		 CWE-416 High
No
No
 - 09.04.2026 SB2026040959
SB2026040962
SB2026040963
and 59 more
#VU125600 - Out-of-bounds read
CVE-2026-33636		 CWE-125 Medium
No
No
 - 09.04.2026 SB2026040959
SB2026040962
SB2026040963
and 45 more
#VU124177 - Use After Free
CVE-2026-23273		 CWE-416 Low
No
No
 - 20.03.2026 SB2026032082
SB2026050778
SB2026050833
and 24 more
#VU123603 - Divide By Zero
CVE-2026-25799		 CWE-369 Medium
No
No
 - 06.03.2026 SB2026030565
SB2026030639
SB2026030640
and 14 more
#VU123539 - Use After Free
CVE-2026-23231		 CWE-416 Low
No
No
 - 04.03.2026 SB2026030454
SB2026040601
SB2026040602
and 33 more
#VU123255 - Heap-based Buffer Overflow
CVE-2026-25897		 CWE-122 High
No
No
 - 25.02.2026 SB2026022540
SB2026030625
SB2026030957
and 5 more
#VU123249 - Out-of-bounds read
CVE-2026-25898		 CWE-125 Medium
No
No
 - 25.02.2026 SB2026022540
SB2026030625
SB2026030639
and 11 more
#VU122833 - Improper input validation
CVE-2026-23112		 CWE-20 Low
No
No
 - 13.02.2026 SB20260213153
SB2026021911
SB2026030678
and 24 more


Showing elements 341 - 360 out of 1520