Known vulnerabilities in Ubuntu - page 347

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1864 high, 3894 medium, 11078 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109844 - Untrusted Search Path
CVE-2025-4802		 CWE-426 Low
No
No
 - 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU108774 - Resource exhaustion
CVE-2025-32873		 CWE-400 Medium
No
No
 - 07.05.2025 SB2025050779
SB2025050787
SB2025050789
and 14 more
#VU108758 - Improper Verification of Cryptographic Signature
CVE-2025-43903		 CWE-347 Low
No
No
 - 07.05.2025 SB2025050736
SB2025050740
SB2025050743
and 6 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859		 CWE-444 Medium
No
No
 - 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU107968 - Improper Verification of Cryptographic Signature
CVE-2025-2866		 CWE-347 Medium
No
No
 - 28.04.2025 SB2025042810
SB2025042901
SB2025050863
#VU106863 - Incorrect Calculation
CVE-2025-21971		 CWE-682 Low
No
No
 - 02.04.2025 SB20250402128
SB20250422196
SB2025050712
and 95 more
#VU106698 - NULL Pointer Dereference
CVE-2025-21953		 CWE-476 Low
No
No
 - 02.04.2025 SB2025040266
SB2025050737
SB2025050738
and 7 more
#VU102085 - Out-of-bounds read
CVE-2024-56598		 CWE-125 Low
No
No
 - 30.12.2024 SB20241230109
SB2025011046
SB2025011047
and 61 more
#VU98953 - NULL Pointer Dereference
CVE-2024-49944		 CWE-476 Low
No
No
 - 22.10.2024 SB2024102265
SB2024120660
SB2024120662
and 56 more
#VU93381 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-47163		 CWE-362 Low
No
No
 - 26.06.2024 SB2024062672
SB2024070867
SB2024070868
and 13 more
#VU90657 - NULL Pointer Dereference
CVE-2023-52458		 CWE-476 Low
No
No
 - 01.06.2024 SB2024060121
SB20240624131
SB20240624132
and 45 more
#VU90325 - Out-of-bounds read
CVE-2021-47191		 CWE-125 Low
No
No
 - 31.05.2024 SB20240531249
SB2024070712
SB2024070826
and 37 more
#VU90266 - Out-of-bounds read
CVE-2024-36934		 CWE-125 Low
No
No
 - 31.05.2024 SB20240531190
SB2024062810
SB2024070973
and 40 more
#VU90246 - Use After Free
CVE-2021-46959		 CWE-416 Low
No
No
 - 31.05.2024 SB20240531167
SB20240711216
SB20240711219
and 4 more
#VU90185 - Use After Free
CVE-2024-26974		 CWE-416 Low
No
No
 - 31.05.2024 SB20240531106
SB2024070838
SB2024070839
and 57 more
#VU90184 - Use After Free
CVE-2024-26996		 CWE-416 Low
No
No
 - 31.05.2024 SB20240531105
SB2024070828
SB2024070838
and 48 more
#VU90065 - Use After Free
CVE-2023-52741		 CWE-416 Low
No
No
 - 30.05.2024 SB20240530169
SB2024070449
SB2024070713
and 33 more
#VU90014 - Missing release of memory after effective lifetime
CVE-2021-47150		 CWE-401 Low
No
No
 - 30.05.2024 SB20240530119
SB20240711216
SB20240711219
and 14 more
#VU83969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49090		 CWE-79 Low
No
No
 - 07.12.2023 SB2023120713
SB2025050702
#VU50707 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21305		 CWE-94 Medium
No
No
 - 15.02.2021 SB2021021515
SB2025050702


Showing elements 6921 - 6940 out of 16913