Known vulnerabilities in Ubuntu 26.04 - page 77

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 26.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 1600
Public exploits: 21
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 26.04 Ubuntu 26.04 is affected by 1600 vulnerabilities: 4 critical, 69 high, 437 medium, 1090 low Critical High Medium Low

Vulnerabilities (1600)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131141 - Out-of-bounds read
CVE-2026-5172		 CWE-125 Medium
No
No
 - 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 5 more
#VU131142 - Improper input validation
CVE-2026-4893		 CWE-20 Medium
No
No
 - 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU131143 - Stack-based buffer overflow
CVE-2026-4892		 CWE-121 High
No
No
 - 12.05.2026 SB2026051245
SB20260513126
SB2026051898
and 11 more
#VU129542 - Out-of-bounds read
CVE-2026-33857		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 25 more
#VU129543 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-33523		 CWE-113 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 19 more
#VU129544 - NULL Pointer Dereference
CVE-2026-33007		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 17 more
#VU129545 - Information Exposure Through Timing Discrepancy
CVE-2026-33006		 CWE-208 High
Public exploit available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU129546 - NULL Pointer Dereference
CVE-2026-29169		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 14 more
#VU129547 - Allocation of Resources Without Limits or Throttling
CVE-2026-29168		 CWE-770 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051103
and 17 more
#VU129548 - Heap-based Buffer Overflow
CVE-2026-28780		 CWE-122 High
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051101
and 25 more
#VU129549 - Improper Access Control
CVE-2026-24072		 CWE-284 Low
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 19 more
#VU129550 - Double Free
CVE-2026-23918		 CWE-415 High
Public exploit available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU126870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41411		 CWE-78 Medium
No
No
 - 22.04.2026 SB20260422223
SB2026050840
SB20260509158
and 16 more
#VU125331 - Integer overflow
CVE-2026-34380		 CWE-190 Medium
No
No
 - 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 10 more
#VU125329 - Integer overflow
CVE-2026-34588		 CWE-190 Low
No
No
 - 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 15 more
#VU125325 - Integer overflow
CVE-2026-27622		 CWE-190 High
No
No
 - 08.04.2026 SB2026040874
SB2026040879
SB2026040880
and 16 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881		 CWE-78 Medium
No
No
 - 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU125036 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35177		 CWE-22 Medium
No
No
 - 07.04.2026 SB2026040793
SB2026042846
SB2026050311
and 10 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more


Showing elements 1521 - 1540 out of 1600