Known vulnerabilities in Ubuntu - page 120

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1863 high, 3894 medium, 11079 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138393 - Command injection
CVE-2026-9277		 CWE-77 High
No
No
 - 20.07.2026 SB2026072009
SB2026072011
SB20260720386
and 6 more
#VU138139 - Type confusion
CVE-2026-57108		 CWE-843 Medium
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138088 - Improper Encoding or Escaping of Output
CVE-2026-50659		 CWE-116 Low
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138087 - Allocation of Resources Without Limits or Throttling
CVE-2026-50651		 CWE-770 Medium
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648		 CWE-770 Medium
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138081 - Improper Access Control
CVE-2026-50528		 CWE-284 Medium
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138080 - Stack-based buffer overflow
CVE-2026-50527		 CWE-121 Medium
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138079 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50526		 CWE-59 Low
No
No
 - 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276		 CWE-670 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404		 CWE-670 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229		 CWE-79 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135702 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59856		 CWE-94 High
No
No
 - 29.06.2026 SB2026062909
SB20260715103
SB2026072430
and 4 more
#VU135167 - Out-of-bounds write
CVE-2026-59857		 CWE-787 Low
No
No
 - 25.06.2026 SB2026062530
SB20260715103
SB2026072526
and 6 more
#VU130545 - Heap-based Buffer Overflow
CVE-2026-43185		 CWE-122 High
No
No
 - 07.05.2026 SB20260507156
SB20260715104
SB20260715105
and 8 more
#VU117943 - Out-of-bounds read
CVE-2024-25178		 CWE-125 Medium
No
No
 - 03.11.2025 SB2025110350
SB2025110351
SB2025110359
and 4 more
#VU117942 - Stack-based buffer overflow
CVE-2024-25176		 CWE-121 High
No
No
 - 03.11.2025 SB2025110350
SB2025110351
SB2025110359
and 4 more
#VU117941 - NULL Pointer Dereference
CVE-2024-25177		 CWE-476 Low
No
No
 - 03.11.2025 SB2025110350
SB2025110351
SB2025110365
and 3 more
#VU101798 - Improper Authentication
CVE-2024-55919		 CWE-287 High
No
No
 - 16.12.2024 SB2024121659
SB2024121668
SB2024121669
and 4 more
#VU93858 - NULL Pointer Dereference
CVE-2023-52646		 CWE-476 Low
No
No
 - 08.07.2024 SB2024070831
SB2024070843
SB2024070845
and 14 more
#VU93162 - Memory corruption
CVE-2021-47117		 CWE-119 Low
No
No
 - 24.06.2024 SB2024062477
SB2024070825
SB20240711216
and 8 more


Showing elements 2381 - 2400 out of 16913