Known vulnerabilities in Ubuntu 26.04 - page 3

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 26.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1600
Public exploits: 21
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 26.04 Ubuntu 26.04 is affected by 1600 vulnerabilities: 4 critical, 69 high, 437 medium, 1090 low Critical High Medium Low

Vulnerabilities (1600)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141795 - Unchecked Return Value
CVE-2026-62909		 CWE-252 Low
No
No
 - 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141792 - Unchecked Input for Loop Condition
CVE-2026-62901		 CWE-606 Medium
No
No
 - 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141791 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-62900		 CWE-212 Medium
No
No
 - 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141790 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-62899		 CWE-444 Medium
No
No
 - 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU135650 - Out-of-bounds read
CVE-2026-53146		 CWE-125 Low
No
No
 - 26.06.2026 SB20260626210
SB20260721153
SB2026072258
and 1 more
#VU135634 - Out-of-bounds write
CVE-2026-53150		 CWE-787 Low
No
No
 - 26.06.2026 SB20260626194
SB2026071404
SB20260721153
and 2 more
#VU135633 - Out-of-bounds read
CVE-2026-53149		 CWE-125 Low
No
No
 - 26.06.2026 SB20260626193
SB20260721153
SB2026072258
and 2 more
#VU135632 - Out-of-bounds write
CVE-2026-53148		 CWE-787 Medium
No
No
 - 26.06.2026 SB20260626192
SB2026071404
SB20260721153
and 2 more
#VU135631 - Out-of-bounds read
CVE-2026-53147		 CWE-125 Medium
No
No
 - 26.06.2026 SB20260626191
SB20260721153
SB2026072258
and 1 more
#VU135516 - Out-of-bounds read
CVE-2026-62292		 CWE-125 Medium
No
No
 - 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 1 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175		 CWE-113 Medium
No
No
 - 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 19 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043		 CWE-183 Medium
No
No
 - 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 7 more
#VU127593 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42044		 CWE-1321 Medium
No
No
 - 24.04.2026 SB20260424168
SB2026062221
SB2026062508
and 5 more
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264		 CWE-1321 Medium
No
No
 - 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 6 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 - 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 10 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 - 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 26 more
#VU14546 - Out-of-bounds read
CVE-2018-15501		 CWE-125 Low
No
No
 - 25.08.2018 SB2018082810
SB2018082811
SB2018102909
and 4 more
#VU32000 - Memory corruption
CVE-2016-10128		 CWE-119 High
No
No
 - 24.03.2017 SB2017032404
SB2017012615
SB2017011506
and 5 more
#VU32001 - NULL Pointer Dereference
CVE-2016-10129		 CWE-476 Medium
No
No
 - 24.03.2017 SB2017032405
SB2017012616
SB2017011506
and 5 more
#VU32002 - Improper Access Control
CVE-2016-10130		 CWE-284 Medium
No
No
 - 24.03.2017 SB2017032406
SB2017012617
SB2017011506
and 5 more


Showing elements 41 - 60 out of 1600