Known vulnerabilities in Ubuntu 26.04 - page 66

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 26.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1600
Public exploits: 21
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 26.04 Ubuntu 26.04 is affected by 1600 vulnerabilities: 4 critical, 69 high, 437 medium, 1090 low Critical High Medium Low

Vulnerabilities (1600)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136048 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-55199		 CWE-835 Medium
No
No
 - 01.07.2026 SB2026070130
SB2026070134
SB2026070138
and 13 more
#VU136047 - Out-of-bounds read
CVE-2025-15661		 CWE-125 Medium
No
No
 - 01.07.2026 SB2026070130
SB2026070134
SB2026071934
and 4 more
#VU136046 - Out-of-bounds write
CVE-2026-55200		 CWE-787 Critical
No
No
 - 01.07.2026 SB2026070130
SB2026070134
SB2026070138
and 4 more
#VU135510 - Out-of-bounds read
CVE-2026-49271		 CWE-125 Medium
No
No
 - 26.06.2026 SB2026062682
SB2026070131
SB2026081953
#VU135157 - Improper Access Control
CVE-2026-12490		 CWE-284 Low
No
No
 - 25.06.2026 SB2026062519
SB2026062660
SB2026062661
and 2 more
#VU135156 - Stack-based buffer overflow
CVE-2026-12246		 CWE-121 Medium
No
No
 - 25.06.2026 SB2026062519
SB2026062660
SB2026062661
and 2 more
#VU135155 - Use After Free
CVE-2026-12245		 CWE-416 Medium
No
No
 - 25.06.2026 SB2026062519
SB2026062660
SB2026062661
and 2 more
#VU135154 - Heap-based Buffer Overflow
CVE-2026-12244		 CWE-122 Medium
No
No
 - 25.06.2026 SB2026062519
SB2026062660
SB2026062661
and 2 more
#VU134640 - Memory corruption
CVE-2026-12318		 CWE-119 Low
No
No
 - 16.06.2026 SB2026061653
SB2026061757
SB2026070132
#VU133463 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52860		 CWE-94 Medium
No
No
 - 08.06.2026 SB2026060814
SB20260619120
SB2026062488
and 4 more
#VU133142 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52858		 CWE-94 Medium
No
No
 - 01.06.2026 SB2026060172
SB20260619120
SB2026062488
and 3 more
#VU133141 - Out-of-bounds read
CVE-2026-52859		 CWE-125 Medium
No
No
 - 01.06.2026 SB2026060171
SB20260619120
SB2026062488
and 4 more
#VU131961 - Out-of-bounds write
CVE-2026-47178		 CWE-787 High
No
No
 - 20.05.2026 SB2026052069
SB2026070131
SB2026081953
#VU131626 - Eval Injection
CVE-2026-47167		 CWE-95 Medium
No
No
 - 18.05.2026 SB2026051807
SB20260619120
SB2026062488
and 3 more
#VU131625 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-47162		 CWE-94 Medium
No
No
 - 18.05.2026 SB2026051806
SB20260619120
SB2026062488
and 3 more
#VU131325 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-45372		 CWE-93 Medium
Public exploit available
No
 - 13.05.2026 SB2026051360
SB2026060544
SB2026060545
and 5 more
#VU128120 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42215		 CWE-78 Medium
No
No
 - 27.04.2026 SB2026042793
SB2026050640
SB2026050641
and 8 more
#VU126592 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41493		 CWE-22 Medium
No
No
 - 20.04.2026 SB20260420112
SB2026061942
SB2026061943
and 4 more
#VU119952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68461		 CWE-79 High
No
Exploited
 - 15.12.2025 SB2025121506
SB2025122339
SB2026033109
and 1 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040		 CWE-22 Low
No
No
 - 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more


Showing elements 1301 - 1320 out of 1600