Known vulnerabilities in Ubuntu 25.10 - page 33

Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007
CWE-345 Medium
No
No
- 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 30 more
#VU124721 - Improper input validation
CVE-2025-59028
CWE-20 Medium
No
No
- 01.04.2026 SB2026040127
SB2026040132
SB2026042920
#VU124722 - Improper input validation
CVE-2025-59032
CWE-20 Medium
No
No
- 01.04.2026 SB2026040128
SB2026040132
SB2026041137
and 14 more
#VU124723 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59031
CWE-200 Low
No
No
- 01.04.2026 SB2026040130
SB2026040132
SB2026041137
and 2 more
#VU124724 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0394
CWE-22 Medium
No
No
- 01.04.2026 SB2026040126
SB2026040132
SB2026041137
and 1 more
#VU124725 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-27860
CWE-90 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124726 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-24031
CWE-89 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124727 - Resource exhaustion
CVE-2026-27859
CWE-400 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU124728 - Resource exhaustion
CVE-2026-27857
CWE-400 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 20 more
#VU124729 - Resource exhaustion
CVE-2026-27858
CWE-400 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 16 more
#VU124730 - Improper Authentication
CVE-2026-27856
CWE-287 High
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 3 more
#VU124731 - Authentication Bypass by Capture-replay
CVE-2026-27855
CWE-294 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU124616 - Resource exhaustion
CVE-2026-1519
CWE-400 Medium
No
No
- 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 40 more
#VU124615 - Missing release of memory after effective lifetime
CVE-2026-3104
CWE-401 Medium
No
No
- 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-4111
CWE-835 Medium
No
No
- 17.03.2026 SB2026031740
SB2026031920
SB2026031927
and 14 more
#VU123648 - Integer overflow
CVE-2026-2921
CWE-190 High
No
No
- 09.03.2026 SB2026030940
SB2026031801
SB2026032755
and 20 more
#VU122832 - Use After Free
CVE-2026-23111
CWE-416 Low
Public exploit available
No
- 13.02.2026 SB20260213152
SB2026021911
SB2026031305
and 52 more
#VU122343 - NULL Pointer Dereference
CVE-2026-23060
CWE-476 Low
No
No
- 05.02.2026 SB2026020510
SB2026020972
SB2026020973
and 47 more
#VU122329 - Use After Free
CVE-2026-23074
CWE-416 Low
No
No
- 04.02.2026 SB2026020494
SB2026020972
SB2026020973
and 106 more
#VU116663 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61594
CWE-200 Medium
No
No
- 07.10.2025 SB2025100723
SB2025110338
SB2025111485
and 4 more


Showing elements 641 - 660 out of 1520