Known vulnerabilities in Ubuntu - page 164

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 25513
Public exploits: 854
Known exploited (KEV): 170

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 25513 known vulnerabilities: 89 critical, 2691 high, 6058 medium, 16672 low Critical High Medium Low

Vulnerabilities (25513)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132319 - Information Exposure Through Timing Discrepancy
CVE-2026-47783		 CWE-208 Low
No
No
 - 26.05.2026 SB2026052674
SB20260528298
SB20260529197
and 4 more
#VU132320 - Information Exposure Through Timing Discrepancy
CVE-2026-47784		 CWE-208 Low
No
No
 - 26.05.2026 SB2026052674
SB20260528278
SB20260528298
and 3 more
#VU132155 - Out-of-bounds write
CVE-2026-46469		 CWE-787 Medium
No
No
 - 22.05.2026 SB20260522143
SB20260528300
SB2026060201
#VU132156 - Out-of-bounds read
CVE-2026-46470		 CWE-125 Medium
No
No
 - 22.05.2026 SB20260522143
SB20260528300
SB2026060201
#VU130925 - Heap-based Buffer Overflow
CVE-2026-45130		 CWE-122 Medium
No
No
 - 11.05.2026 SB2026051150
SB2026052726
SB2026052760
and 11 more
#VU130908 - Improper Encoding or Escaping of Output
CVE-2026-7263		 CWE-116 Medium
No
No
 - 10.05.2026 SB2026051001
SB2026051416
SB2026051523
and 3 more
#VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-6735		 CWE-79 Medium
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 19 more
#VU130910 - NULL Pointer Dereference
CVE-2026-7259		 CWE-476 Medium
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 14 more
#VU130911 - Out-of-bounds read
CVE-2026-6104		 CWE-125 Medium
No
No
 - 10.05.2026 SB2026051001
SB2026051416
SB2026051523
and 3 more
#VU129539 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-44656		 CWE-78 Medium
No
No
 - 04.05.2026 SB2026050476
SB2026052760
SB2026052762
and 10 more
#VU127881 - Heap-based Buffer Overflow
CVE-2026-42046		 CWE-122 High
No
No
 - 25.04.2026 SB20260425196
SB2026052681
SB20260528299
and 3 more
#VU126891 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42307		 CWE-78 Medium
No
No
 - 23.04.2026 SB2026042335
SB2026052760
SB2026052762
and 10 more
#VU126870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41411		 CWE-78 Medium
No
No
 - 22.04.2026 SB20260422223
SB2026050840
SB20260509158
and 19 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU125785 - Improper Validation of Unsafe Equivalence in Input
CVE-2026-34080		 CWE-1289 Medium
No
No
 - 10.04.2026 SB2026041070
SB2026041403
SB2026041438
and 12 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
Exploited
 - 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 33 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU101884 - Integer overflow
CVE-2024-36617		 CWE-190 High
No
No
 - 20.12.2024 SB2024122032
SB2024122041
SB2024122042
and 5 more
#VU97632 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2024-45751		 CWE-338 Medium
No
No
 - 20.09.2024 SB2024092092
SB2024092094
SB2024092099
and 3 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 111 more


Showing elements 3261 - 3280 out of 25513