Known vulnerabilities in Ubuntu 25.10 - page 45

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123164 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-2604		 CWE-22 Medium
No
No
 - 24.02.2026 SB2026022414
SB2026022419
SB2026030366
and 7 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 - 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122995 - Allocation of Resources Without Limits or Throttling
CVE-2026-24708		 CWE-770 Low
No
No
 - 17.02.2026 SB2026021762
SB2026021847
SB2026022004
and 1 more
#VU122992 - Heap-based Buffer Overflow
CVE-2026-25068		 CWE-122 Medium
No
No
 - 17.02.2026 SB2026021758
SB2026021767
SB2026022817
and 2 more
#VU122970 - Heap-based Buffer Overflow
CVE-2026-2447		 CWE-122 High
No
No
 - 16.02.2026 SB20260216163
SB20260216169
SB2026022003
and 43 more
#VU122503 - NULL Pointer Dereference
CVE-2026-23948		 CWE-476 Low
No
No
 - 10.02.2026 SB2026021005
SB20260216151
SB20260408133
and 14 more
#VU122501 - Use After Free
CVE-2026-24491		 CWE-416 High
No
No
 - 10.02.2026 SB2026021005
SB20260216151
SB2026022525
and 27 more
#VU122500 - Use After Free
CVE-2026-24675		 CWE-416 High
No
No
 - 10.02.2026 SB2026021005
SB20260216151
SB2026022525
and 21 more
#VU122498 - Heap-based Buffer Overflow
CVE-2026-24679		 CWE-122 High
No
No
 - 10.02.2026 SB2026021005
SB20260216151
SB2026022525
and 22 more
#VU122491 - Resource exhaustion
CVE-2025-14831		 CWE-400 Medium
No
No
 - 10.02.2026 SB2026021004
SB2026021048
SB2026021061
and 20 more
#VU121030 - Improper Authentication
CVE-2025-15224		 CWE-287 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 14 more
#VU121029 - Improper Validation of Certificate with Host Mismatch
CVE-2025-15079		 CWE-297 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 15 more
#VU121027 - Improper Certificate Validation
CVE-2025-14819		 CWE-295 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 13 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524		 CWE-522 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017		 CWE-567 Low
No
No
 - 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 12 more
#VU121024 - Protection Mechanism Failure
CVE-2025-13034		 CWE-693 Low
No
No
 - 07.01.2026 SB2026010741
SB2026012829
SB2026021026
and 3 more
#VU118723 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11563		 CWE-22
No
No
 - 24.11.2025 SB2025112458
SB2025112467
SB2025112589
and 4 more
#VU118650 - Stack-based buffer overflow
CVE-2025-9820		 CWE-121 Low
No
No
 - 20.11.2025 SB2025112055
SB2025112746
SB2025112747
and 18 more
#VU115175 - Missing release of memory after effective lifetime
CVE-2025-8277		 CWE-401 Medium
No
No
 - 12.09.2025 SB2025091210
SB2025091219
SB2025091220
and 11 more
#VU100502 - Improper input validation
CVE-2024-50305		 CWE-20 Medium
No
No
 - 14.11.2024 SB2024111440
SB2024111444
SB2024111445
and 7 more


Showing elements 881 - 900 out of 1520