Known vulnerabilities in Ubuntu 25.10 - page 5

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545		 CWE-200 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135086 - Use After Free
CVE-2026-9080		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 6 more
#VU135083 - Double Free
CVE-2026-8925		 CWE-415 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 1 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 6 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU125858 - Improper control of a resource through its lifetime
CVE-2026-31418		 CWE-664 Low
No
No
 - 14.04.2026 SB2026041416
SB20260509143
SB20260509144
and 31 more
#VU124944 - Use After Free
CVE-2026-23427		 CWE-416 Medium
No
No
 - 06.04.2026 SB20260406108
SB20260513116
SB2026070282
and 7 more
#VU124943 - Use After Free
CVE-2026-23428		 CWE-416 Medium
No
No
 - 06.04.2026 SB20260406107
SB20260513116
SB2026051411
and 24 more
#VU124921 - NULL Pointer Dereference
CVE-2026-23450		 CWE-476 Medium
No
No
 - 06.04.2026 SB2026040685
SB2026042519
SB2026042520
and 32 more
#VU124920 - Use After Free
CVE-2026-23450		 CWE-416 Medium
No
No
 - 06.04.2026 SB2026040684
SB2026042519
SB2026042520
and 32 more
#VU124910 - Out-of-bounds read
CVE-2026-23455		 CWE-125 Medium
No
No
 - 06.04.2026 SB2026040668
SB2026050312
SB2026050315
and 52 more
#VU124880 - Heap-based Buffer Overflow
CVE-2026-31402		 CWE-122 Medium
No
No
 - 06.04.2026 SB2026040636
SB2026042519
SB2026042521
and 89 more
#VU124450 - Use After Free
CVE-2026-23392		 CWE-416 Low
No
No
 - 25.03.2026 SB2026032556
SB2026041129
SB2026041130
and 50 more
#VU124176 - Use After Free
CVE-2026-23272		 CWE-416 Low
No
No
 - 20.03.2026 SB2026032081
SB20260415174
SB2026042328
and 45 more
#VU124174 - Resource exhaustion
CVE-2026-23278		 CWE-400 Low
No
No
 - 20.03.2026 SB2026032079
SB2026041129
SB2026041130
and 33 more
#VU121986 - Out-of-bounds read
CVE-2026-22984		 CWE-125 Low
No
No
 - 23.01.2026 SB20260123107
SB2026020972
SB2026020973
and 37 more


Showing elements 81 - 100 out of 1520