Known vulnerabilities in Ubuntu 26.04

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 26.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1516
Public exploits: 17
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 26.04 Ubuntu 26.04 is affected by 1516 vulnerabilities: 4 critical, 63 high, 389 medium, 1060 low Critical High Medium Low

Vulnerabilities (1516)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141104 - Integer overflow
CVE-2026-53705		 CWE-190 Medium
No
No
 - 06.08.2026 SB2026080644
SB2026080672
SB2026080674
and 13 more
#VU139941 - Out-of-bounds write
CVE-2026-6949		 CWE-787 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139942 - Out-of-bounds read
CVE-2026-58216		 CWE-125 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139943 - Resource exhaustion
CVE-2026-58218		 CWE-400 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139944 - Improper Access Control
CVE-2026-58221		 CWE-284 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222		 CWE-89 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139946 - Improper input validation
CVE-2026-58224		 CWE-20 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 12 more
#VU139416 - Improper Resource Shutdown or Release
CVE-2026-64526		 CWE-404 Low
No
No
 - 27.07.2026 SB2026072739
SB2026072897
#VU139415 - Improper Resource Shutdown or Release
CVE-2026-64525		 CWE-404 Low
No
No
 - 27.07.2026 SB2026072738
SB2026072897
#VU139414 - Out-of-bounds read
CVE-2026-64524		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072737
SB2026072897
#VU139413 - Use After Free
CVE-2026-64523		 CWE-416 Low
No
No
 - 27.07.2026 SB2026072736
SB2026072897
#VU139412 - Improper Initialization
CVE-2026-64522		 CWE-665 Low
No
No
 - 27.07.2026 SB2026072735
SB2026072897
#VU139411 - Deadlock
CVE-2026-64521		 CWE-833 Low
No
No
 - 27.07.2026 SB2026072734
SB2026072897
#VU139406 - Improper Locking
CVE-2026-64528		 CWE-667 Low
No
No
 - 27.07.2026 SB2026072729
SB2026072897
#VU139405 - Out-of-bounds read
CVE-2026-64527		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072728
SB2026072897
#VU139404 - Out-of-bounds read
CVE-2026-64527		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072727
SB2026072897
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779		 CWE-732 Low
No
No
 - 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 4 more
#VU136812 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-53354		 CWE-362 Low
No
No
 - 02.07.2026 SB2026070294
SB2026070325
SB2026070326
and 10 more
#VU132159 - Heap-based Buffer Overflow
CVE-2026-39043		 CWE-122 High
No
No
 - 22.05.2026 SB20260522143
SB2026062225
SB2026080811
#VU132158 - Integer overflow
CVE-2026-39044		 CWE-190 Medium
No
No
 - 22.05.2026 SB20260522143
SB2026062225
SB2026080811


Showing elements 1 - 20 out of 1516