Known vulnerabilities in Ubuntu - page 166

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1863 high, 3894 medium, 11079 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128474 - Improper Access Control
CVE-2026-35414		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 24 more
#VU128477 - Improper Authorization
CVE-2026-35388		 CWE-285 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 19 more
#VU128323 - UNIX Symbolic Link (Symlink) Following
CVE-2026-33056		 CWE-61 Medium
No
No
 - 28.04.2026 SB2026042866
SB2026042889
SB2026042890
and 61 more
#VU128271 - Improper input validation
CVE-2026-34881		 CWE-20 Medium
No
No
 - 28.04.2026 SB2026042831
SB2026042838
SB2026071568
#VU128221 - Incorrect Privilege Assignment
CVE-2026-6970		 CWE-266 Low
No
No
 - 27.04.2026 SB20260427173
SB2026042845
#VU128154 - Missing release of memory after effective lifetime
CVE-2026-32874		 CWE-401 Medium
No
No
 - 27.04.2026 SB20260427105
SB20260427108
SB2026042922
and 1 more
#VU128153 - Integer overflow
CVE-2026-32875		 CWE-190 Medium
No
No
 - 27.04.2026 SB20260427105
SB20260427108
SB2026042922
and 3 more
#VU128152 - Uncontrolled Recursion
CVE-2026-30922		 CWE-674 Medium
No
No
 - 27.04.2026 SB20260427104
SB20260427114
SB20260427115
and 28 more
#VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-35536		 CWE-74 Medium
No
No
 - 27.04.2026 SB20260427102
SB20260427118
SB20260427149
and 10 more
#VU128147 - Resource exhaustion
CVE-2026-31958		 CWE-400 Medium
No
No
 - 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597		 CWE-345 Medium
No
No
 - 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU126937 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-41651		 CWE-367 Low
Available
No
 - 23.04.2026 SB2026042354
SB20260424303
SB2026042911
and 17 more
#VU126862 - Improper Verification of Cryptographic Signature
CVE-2026-40372		 CWE-347 High
No
No
 - 22.04.2026 SB20260422218
SB2026042923
SB2026042924
and 3 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881		 CWE-78 Medium
No
No
 - 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU125036 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35177		 CWE-22 Medium
No
No
 - 07.04.2026 SB2026040793
SB2026042846
SB2026050311
and 10 more
#VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24049		 CWE-22 Medium
Available
No
 - 22.01.2026 SB2026012210
SB2026012503
SB2026012761
and 20 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 - 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 - 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155		 CWE-200 Low
No
No
 - 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU61668 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0536		 CWE-200 Low
No
No
 - 28.03.2022 SB2022032841
SB2022032843
SB2022042561
and 27 more


Showing elements 3301 - 3320 out of 16913