Known vulnerabilities in Ubuntu - page 177

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1863 high, 3894 medium, 11079 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125904 - Stack-based buffer overflow
CVE-2026-25994		 CWE-121 High
Available
No
 - 14.04.2026 SB2026030657
SB2026041668
SB2026052528
#VU125785 - Improper Validation of Unsafe Equivalence in Input
CVE-2026-34080		 CWE-1289 Medium
No
No
 - 10.04.2026 SB2026041070
SB2026041403
SB2026041438
and 12 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388		 CWE-476 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 39 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 50 more
#VU125561 - Always-Incorrect Control Flow Implementation
CVE-2026-2673		 CWE-670 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB20260409112
and 5 more
#VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34982		 CWE-78 High
No
No
 - 07.04.2026 SB2026040792
SB2026041439
SB20260417153
and 13 more
#VU124677 - NULL Pointer Dereference
CVE-2026-32249		 CWE-476 Low
No
No
 - 30.03.2026 SB2026033031
SB2026041439
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412		 CWE-78 Medium
No
No
 - 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 23 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 - 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU108469 - Improper Locking
CVE-2023-53041		 CWE-667 Low
No
No
 - 04.05.2025 SB2025050452
SB2025061221
SB2025061640
and 6 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449		 CWE-121 Medium
No
No
 - 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU62781 - Improper Validation of Certificate with Host Mismatch
CVE-2020-15260		 CWE-297 Medium
No
No
 - 04.05.2022 SB2021031124
SB2021072079
SB2026041668
#VU62780 - Resource exhaustion
CVE-2021-21375		 CWE-400 Medium
No
No
 - 04.05.2022 SB2021031124
SB2021072079
SB2026041668
#VU55295 - Uncaught Exception
CVE-2021-32686		 CWE-248 Medium
No
No
 - 26.07.2021 SB2021072606
SB2021072608
SB2021110229
and 2 more
#VU11776 - NULL Pointer Dereference
CVE-2018-1000099		 CWE-476 Low
No
No
 - 12.04.2018 SB2018041206
SB2026041668
#VU11775 - Integer overflow
CVE-2018-1000098		 CWE-190 Low
No
No
 - 12.04.2018 SB2018041206
SB2018050601
SB2026041668
#VU11774 - Integer overflow
CVE-2017-16875		 CWE-190 Low
No
No
 - 12.04.2018 SB2018041206
SB2026041668
#VU11773 - Buffer overflow
CVE-2017-16872		 CWE-120 High
No
No
 - 10.04.2018 SB2018041206
SB2026041668


Showing elements 3521 - 3540 out of 16913