Known vulnerabilities in Ubuntu 25.10 - page 7

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1520
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1520 vulnerabilities: 9 critical, 116 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1520)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134857 - Improper Access Control
CVE-2026-44917		 CWE-284 Low
No
No
 - 18.06.2026 SB2026061841
SB2026061857
#VU134855 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-46447		 CWE-74 Low
No
No
 - 18.06.2026 SB2026061841
SB2026061857
#VU134477 - Resource exhaustion
CVE-2026-45591		 CWE-400 Medium
No
No
 - 12.06.2026 SB2026061277
SB2026061283
SB2026061284
and 10 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 19 more
#VU134272 - Allocation of Resources Without Limits or Throttling
CVE-2026-34183		 CWE-770 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 10 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 9 more
#VU134278 - Out-of-bounds read
CVE-2026-34180		 CWE-125 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 33 more
#VU134279 - Improper input validation
CVE-2026-34181		 CWE-20 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 10 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 34 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 21 more
#VU134117 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45491		 CWE-59 Low
No
No
 - 09.06.2026 SB2026060968
SB2026061283
SB2026061284
and 10 more
#VU131545 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-43961		 CWE-94 Medium
No
No
 - 15.05.2026 SB2026051518
SB20260529238
SB2026053001
and 8 more
#VU131544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46483		 CWE-78 Low
No
No
 - 15.05.2026 SB2026051517
SB2026052130
SB2026052523
and 20 more
#VU131177 - Improper Access Control
CVE-2026-43515		 CWE-284 Medium
Public exploit available
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 21 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513		 CWE-178 Medium
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 19 more
#VU131180 - Improper Authentication
CVE-2026-43512		 CWE-287 Medium
Public exploit available
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498		 CWE-200 Low
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 18 more
#VU131182 - Improper input validation
CVE-2026-41293		 CWE-20 Medium
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU131103 - Out-of-bounds write
CVE-2026-45700		 CWE-787 Medium
No
No
 - 12.05.2026 SB2026051220
SB2026061664
SB2026070928
and 2 more


Showing elements 121 - 140 out of 1520