Known vulnerabilities in Ubuntu 25.10 - page 20

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130455 - Out-of-bounds write
CVE-2026-40685		 CWE-787 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130456 - Out-of-bounds read
CVE-2026-40686		 CWE-125 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130457 - Out-of-bounds write
CVE-2026-40687		 CWE-787 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130190 - Improper input validation
CVE-2026-5766		 CWE-20 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192		 CWE-384 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907		 CWE-525 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU128473 - Improper input validation
CVE-2026-35386		 CWE-20 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 16 more
#VU128475 - Improper Privilege Management
CVE-2026-35385		 CWE-269 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 30 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 10 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 9 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873		 CWE-319 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205		 CWE-22 Medium
No
No
 - 28.04.2026 SB20260428216
SB2026050603
SB2026051399
and 2 more
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431		 CWE-664 High
Public exploit available
Exploited
 - 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 129 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 - 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 33 more
#VU113502 - Memory corruption
CVE-2025-43213		 CWE-119 Low
No
No
 - 30.07.2025 SB2025073053
SB2025073151
SB2025073153
and 23 more
#VU113501 - Memory corruption
CVE-2025-43214		 CWE-119 Low
No
No
 - 30.07.2025 SB2025073053
SB2025073151
SB2025073153
and 24 more


Showing elements 381 - 400 out of 1520