Known vulnerabilities in Ubuntu 25.10 - page 30

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126231 - Improper Neutralization of Special Elements
CVE-2026-32178		 CWE-138 Medium
No
No
 - 15.04.2026 SB20260415151
SB2026041655
SB2026041656
and 19 more
#VU125785 - Improper Validation of Unsafe Equivalence in Input
CVE-2026-34080		 CWE-1289 Medium
No
No
 - 10.04.2026 SB2026041070
SB2026041403
SB2026041438
and 12 more
#VU125562 - Unchecked Return Value
CVE-2026-31790		 CWE-252 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 27 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388		 CWE-476 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 39 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 49 more
#VU125568 - Heap-based Buffer Overflow
CVE-2026-31789		 CWE-122 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 23 more
#VU125561 - Always-Incorrect Control Flow Implementation
CVE-2026-2673		 CWE-670 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB20260409112
and 4 more
#VU125352 - Use After Free
CVE-2026-26986		 CWE-416 Low
No
No
 - 08.04.2026 SB2026040899
SB20260408121
SB20260408122
and 20 more
#VU125346 - Reachable Assertion
CVE-2026-27015		 CWE-617 Medium
No
No
 - 08.04.2026 SB2026040899
SB20260408121
SB20260408122
and 10 more
#VU125344 - Out-of-bounds write
CVE-2026-26965		 CWE-787 High
No
No
 - 08.04.2026 SB2026040899
SB20260408109
SB20260408110
and 24 more
#VU125343 - Integer overflow
CVE-2026-27951		 CWE-190 Medium
No
No
 - 08.04.2026 SB2026040899
SB20260408155
SB20260427185
and 18 more
#VU125342 - Use After Free
CVE-2026-27950		 CWE-416 Medium
No
No
 - 08.04.2026 SB2026040899
SB20260408155
SB20260427186
#VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34982		 CWE-78 High
No
No
 - 07.04.2026 SB2026040792
SB2026041439
SB20260417153
and 13 more
#VU124677 - NULL Pointer Dereference
CVE-2026-32249		 CWE-476 Low
No
No
 - 30.03.2026 SB2026033031
SB2026041439
#VU124612 - Use After Free
CVE-2026-32748		 CWE-416 Medium
No
No
 - 25.03.2026 SB20260325206
SB2026033197
SB2026040350
and 15 more
#VU124611 - Out-of-bounds read
CVE-2026-33515		 CWE-125 Medium
No
No
 - 25.03.2026 SB20260325206
SB2026040350
SB2026040351
and 6 more
#VU124610 - Use After Free
CVE-2026-33526		 CWE-416 Medium
No
No
 - 25.03.2026 SB20260325206
SB2026033197
SB2026040350
and 18 more
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412		 CWE-78 Medium
No
No
 - 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 23 more


Showing elements 581 - 600 out of 1520