Known vulnerabilities in Ubuntu - page 3

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 25497
Public exploits: 853
Known exploited (KEV): 169

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 25497 known vulnerabilities: 89 critical, 2689 high, 6054 medium, 16662 low Critical High Medium Low

Vulnerabilities (25497)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140833 - Uncontrolled Recursion
CVE-2026-7260		 CWE-674 Low
No
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 15 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543		 CWE-89 High
Available
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 14 more
#VU137036 - Use After Free
CVE-2026-33630		 CWE-416 Medium
No
No
 - 07.07.2026 SB2026070774
SB2026070776
SB2026070777
and 4 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387		 CWE-121 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 9 more
#VU136938 - Out-of-bounds write
CVE-2026-63388		 CWE-787 Low
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 8 more
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 14 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545		 CWE-200 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 11 more
#VU135086 - Use After Free
CVE-2026-9080		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 15 more
#VU135083 - Double Free
CVE-2026-8925		 CWE-415 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 8 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 17 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 17 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 17 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 15 more
#VU130915 - NULL Pointer Dereference
CVE-2026-7262		 CWE-476 Medium
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 20 more
#VU130916 - Integer overflow
CVE-2026-7568		 CWE-190 Medium
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 20 more
#VU91611 - Insufficient Verification of Data Authenticity
CVE-2024-3049		 CWE-345 Medium
No
No
 - 10.06.2024 SB2024061049
SB2024061050
SB2024061051
and 19 more
#VU91047 - Missing Authorization
CVE-2024-36041		 CWE-862 Low
No
No
 - 04.06.2024 SB2024060458
SB2024070602
SB20240711137
and 4 more
#VU77534 - External Control of File Name or Path
CVE-2023-1183		 CWE-73 High
No
No
 - 20.06.2023 SB2023062004
SB2023062203
SB2023062204
and 15 more


Showing elements 41 - 60 out of 25497