Known vulnerabilities in Ubuntu - page 35

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 25513
Public exploits: 854
Known exploited (KEV): 169

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 25513 known vulnerabilities: 89 critical, 2691 high, 6058 medium, 16672 low Critical High Medium Low

Vulnerabilities (25513)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146999 - Heap-based Buffer Overflow
CVE-2026-18938		 CWE-122 Low
No
No
 - 05.09.2026 SB2026090519
SB2026090528
SB2026090529
and 3 more
#VU146684 - Use After Free
CVE-2026-18924		 CWE-416 Low
No
No
 - 02.09.2026 SB2026090233
SB20260925165
SB20260925166
and 11 more
#VU146682 - Use After Free
CVE-2026-80229		 CWE-416 Low
No
No
 - 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 7 more
#VU146681 - Improper Certificate Validation
CVE-2026-80230		 CWE-295 Low
No
No
 - 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 12 more
#VU146679 - Insertion of Sensitive Information Into Sent Data
CVE-2026-80255		 CWE-201 Medium
No
No
 - 02.09.2026 SB2026090233
SB2026093019
SB2026100631
and 6 more
#VU146676 - Insertion of Sensitive Information Into Sent Data
CVE-2026-82209		 CWE-201 Low
No
No
 - 02.09.2026 SB2026090233
SB20260925165
SB20260925166
and 8 more
#VU146636 - Uncontrolled Recursion
CVE-2026-13757		 CWE-674 Low
No
No
 - 01.09.2026 SB2026090153
SB2026090154
SB2026090155
and 6 more
#VU139114 - Heap-based Buffer Overflow
CVE-2026-34743		 CWE-122 Medium
No
No
 - 22.07.2026 SB2026072263
SB2026072264
SB2026072265
and 7 more
#VU135769 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-59939		 CWE-409 Medium
No
No
 - 29.06.2026 SB2026062991
SB2026072355
SB2026073009
and 8 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175		 CWE-113 Medium
No
No
 - 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 23 more
#VU129543 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-33523		 CWE-113 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 20 more
#VU129544 - NULL Pointer Dereference
CVE-2026-33007		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 20 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043		 CWE-183 Medium
No
No
 - 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 12 more
#VU127593 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42044		 CWE-1321 Medium
No
No
 - 24.04.2026 SB20260424168
SB2026062221
SB2026062508
and 10 more
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264		 CWE-1321 Medium
No
No
 - 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 13 more
#VU126248 - Use After Free
CVE-2026-28688		 CWE-416 Low
No
No
 - 15.04.2026 SB2026031159
SB20260415161
SB20260415162
and 11 more
#VU125882 - Out-of-bounds read
CVE-2026-33905		 CWE-125 Medium
No
No
 - 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 12 more
#VU125879 - Integer overflow
CVE-2026-33900		 CWE-190 Medium
No
No
 - 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 12 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 - 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 33 more
#VU121121 - Uncontrolled Recursion
CVE-2025-68950		 CWE-674 Medium
No
No
 - 09.01.2026 SB2026010910
SB2026010912
SB2026010913
and 8 more


Showing elements 681 - 700 out of 25513