Known vulnerabilities in Ubuntu 25.10 - page 71

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 25.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1521
Public exploits: 52
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 25.10 Ubuntu 25.10 is affected by 1521 vulnerabilities: 9 critical, 117 high, 451 medium, 943 low Critical High Medium Low

Vulnerabilities (1521)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119989 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-66004		 CWE-22 Low
No
No
 - 16.12.2025 SB2025121616
SB2025121617
SB2025121760
and 9 more
#VU119965 - Use After Free
CVE-2025-12105		 CWE-416 Low
No
No
 - 15.12.2025 SB2025121536
SB2025121537
SB2025121553
and 8 more
#VU119383 - Use After Free
CVE-2025-62408		 CWE-416 Medium
No
No
 - 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 2 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU119212 - Memory corruption
CVE-2025-66287		 CWE-119 Low
No
No
 - 04.12.2025 SB2025110415
SB2025120801
SB2025120802
and 16 more
#VU119211 - Exposure of sensitive information to an unauthorized actor
CVE-2025-13947		 CWE-200 Medium
No
No
 - 04.12.2025 SB2025110415
SB2025120801
SB2025120802
and 16 more
#VU119203 - Incorrect Calculation
CVE-2025-40232		 CWE-682 Low
No
No
 - 04.12.2025 SB2025120493
SB2025121115
SB2025121609
#VU118845 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-66034		 CWE-22 High
Public exploit available
No
 - 28.11.2025 SB2025112880
SB2025121314
SB2026012166
and 4 more
#VU118780 - Out-of-bounds read
CVE-2025-64505		 CWE-125 Medium
No
No
 - 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 22 more
#VU118779 - Out-of-bounds read
CVE-2025-64506		 CWE-125 Medium
No
No
 - 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 9 more
#VU118778 - Out-of-bounds read
CVE-2025-64720		 CWE-125 Medium
No
No
 - 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018		 CWE-122 Critical
Public exploit available
No
 - 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more
#VU117970 - Memory corruption
CVE-2025-43421		 CWE-119 Low
No
No
 - 04.11.2025 SB2025110415
SB2025110420
SB2025110422
and 18 more
#VU117956 - Improper input validation
CVE-2025-43458		 CWE-20 Low
No
No
 - 04.11.2025 SB2025110415
SB2025110420
SB2025110422
and 21 more
#VU117654 - Use After Free
CVE-2025-40018		 CWE-416 Low
No
No
 - 26.10.2025 SB2025102601
SB2025111182
SB2025111213
and 79 more
#VU116975 - Memory corruption
CVE-2025-11081		 CWE-119 Low
No
No
 - 14.10.2025 SB2025082140
SB2025101642
SB2025121112
and 2 more
#VU116972 - Heap-based Buffer Overflow
CVE-2025-11082		 CWE-122 Low
No
No
 - 14.10.2025 SB2025082140
SB2025101420
SB2025101421
and 16 more
#VU113803 - Out-of-bounds read
CVE-2025-7039		 CWE-125 Low
No
No
 - 11.08.2025 SB2025081149
SB2025081161
SB2025081695
and 39 more
#VU86217 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-45139		 CWE-611 Medium
No
No
 - 07.02.2024 SB2024020731
SB2024020734
SB20240312162
and 2 more


Showing elements 1401 - 1420 out of 1521