Known vulnerabilities in Ubuntu 25.10 - page 66

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1521
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1521 vulnerabilities: 9 critical, 117 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1521)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122661 - Exposure of sensitive information to an unauthorized actor
CVE-2026-1539		 CWE-200 Low
No
No
 - 11.02.2026 SB2026021137
SB2026021167
SB2026021224
and 13 more
#VU122660 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1536		 CWE-93 Medium
No
No
 - 11.02.2026 SB2026021137
SB2026021174
SB2026021224
and 5 more
#VU122300 - Use of Uninitialized Resource
CVE-2025-15281		 CWE-908 Medium
No
No
 - 04.02.2026 SB2026020432
SB2026020433
SB2026020439
and 17 more
#VU122299 - Integer overflow
CVE-2026-0861		 CWE-190 High
No
No
 - 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 19 more
#VU122298 - Use of Uninitialized Resource
CVE-2026-0915		 CWE-908 Low
No
No
 - 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 17 more
#VU122271 - Heap-based Buffer Overflow
CVE-2025-15536		 CWE-122 High
No
No
 - 03.02.2026 SB2026020379
SB2026020380
SB2026020381
and 7 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU122268 - Integer overflow
CVE-2026-25210		 CWE-190 High
No
No
 - 03.02.2026 SB2026020364
SB20260205121
SB2026020611
and 22 more
#VU122267 - NULL Pointer Dereference
CVE-2026-24515		 CWE-476 Medium
No
No
 - 03.02.2026 SB2026020364
SB2026020367
SB2026020368
and 18 more
#VU122261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1312		 CWE-89 High
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1287		 CWE-89 High
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122259 - Resource exhaustion
CVE-2026-1285		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1207		 CWE-89 High
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122257 - Resource exhaustion
CVE-2025-14550		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122256 - Information Exposure Through Timing Discrepancy
CVE-2025-13473		 CWE-208 Low
No
No
 - 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 13 more
#VU121642 - Improper Authorization
CVE-2026-22797		 CWE-285 Medium
No
No
 - 19.01.2026 SB2026011931
SB2026012105
SB2026020377
#VU119199 - Use of Uninitialized Resource
CVE-2025-40214		 CWE-908 Low
No
No
 - 04.12.2025 SB2025120489
SB2026020480
SB2026032722
and 1 more
#VU117660 - Improper input validation
CVE-2025-40019		 CWE-20 Low
Public exploit available
No
 - 26.10.2025 SB2025102607
SB20251031129
SB20251031132
and 40 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 - 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more


Showing elements 1301 - 1320 out of 1521