Known vulnerabilities in Ubuntu 26.04 - page 65

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 26.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1600
Public exploits: 21
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 26.04 Ubuntu 26.04 is affected by 1600 vulnerabilities: 4 critical, 69 high, 437 medium, 1090 low Critical High Medium Low

Vulnerabilities (1600)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136663 - Improper input validation
CVE-2026-20243		 CWE-20 Medium
No
No
 - 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 3 more
#VU136665 - Improper input validation
CVE-2026-20244		 CWE-20 Medium
No
No
 - 01.07.2026 SB2026070169
SB2026070205
SB2026070876
and 7 more
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 6 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545		 CWE-200 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135086 - Use After Free
CVE-2026-9080		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 6 more
#VU135083 - Double Free
CVE-2026-8925		 CWE-415 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 1 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 6 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU134978 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-57456		 CWE-94 High
No
No
 - 22.06.2026 SB2026062216
SB2026070315
SB2026071933
and 3 more
#VU134977 - Out-of-bounds write
CVE-2026-57455		 CWE-787 Low
No
No
 - 22.06.2026 SB2026062215
SB2026070315
SB2026071933
and 3 more
#VU134975 - Command injection
CVE-2026-57453		 CWE-77 Medium
No
No
 - 22.06.2026 SB2026062213
SB2026070315
#VU134969 - Out-of-bounds read
CVE-2026-57452		 CWE-125 Medium
No
No
 - 19.06.2026 SB20260619128
SB2026070315
SB2026071933
#VU134882 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-55895		 CWE-94 High
No
No
 - 18.06.2026 SB2026061855
SB2026070315
SB2026070617
and 3 more
#VU134881 - Out-of-bounds write
CVE-2026-55892		 CWE-787 Medium
No
No
 - 18.06.2026 SB2026061854
SB2026070315
SB2026070617
and 3 more
#VU134580 - Out-of-bounds write
CVE-2026-55693		 CWE-787 Medium
No
No
 - 16.06.2026 SB2026061605
SB2026070315
SB2026070617
and 6 more
#VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-45582		 CWE-22 Low
No
No
 - 23.12.2025 SB2025122320
SB2025122321
SB2026010502
and 19 more


Showing elements 1281 - 1300 out of 1600