Known vulnerabilities in Ubuntu - page 165

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1863 high, 3894 medium, 11079 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130190 - Improper input validation
CVE-2026-5766		 CWE-20 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907		 CWE-525 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU128473 - Improper input validation
CVE-2026-35386		 CWE-20 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 16 more
#VU128475 - Improper Privilege Management
CVE-2026-35385		 CWE-269 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 30 more
#VU128476 - Improper Access Control
CVE-2026-35387		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873		 CWE-319 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431		 CWE-664 High
Available
Exploited
 - 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 129 more
#VU122451 - Protection Mechanism Failure
CVE-2026-25916		 CWE-693 Medium
Available
No
 - 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU122450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26079		 CWE-79 Medium
No
No
 - 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU113715 - Improper input validation
CVE-2019-15237		 CWE-20 Medium
No
No
 - 06.08.2025 SB2019040702
SB2025080643
SB2026043079
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 - 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU95308 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42010		 CWE-200 Medium
Available
No
 - 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU95299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-42008		 CWE-79 Low
Available
No
 - 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356		 CWE-79 Medium
No
No
 - 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more


Showing elements 3281 - 3300 out of 16913