Known vulnerabilities in Ubuntu - page 4

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16134
Public exploits: 529
Known exploited (KEV): 126
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16134 known vulnerabilities: 74 critical, 1837 high, 3712 medium, 10508 low Critical High Medium Low

Vulnerabilities (16134)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198		 CWE-1286 High
No
No
 - 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199		 CWE-130 Medium
No
No
 - 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU139246 - Improper Privilege Management
 CWE-269 Low
No
No
 - 23.07.2026 SB2026072371
SB20260727239
#VU139245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Low
No
No
 - 23.07.2026 SB2026072371
SB20260727239
#VU138583 - Stack-based buffer overflow
CVE-2026-61548		 CWE-121 Medium
No
No
 - 20.07.2026 SB20260720175
SB2026072478
SB2026080382
and 2 more
#VU138438 - Missing Release of Resource after Effective Lifetime
CVE-2026-64184		 CWE-772 Low
No
No
 - 20.07.2026 SB2026072033
SB2026072366
SB2026072479
and 1 more
#VU138428 - Out-of-bounds read
CVE-2026-64186		 CWE-125 Low
No
No
 - 20.07.2026 SB2026072025
SB2026072366
SB2026072479
and 1 more
#VU136812 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-53354		 CWE-362 Low
No
No
 - 02.07.2026 SB2026070294
SB2026070325
SB2026070326
and 10 more
#VU139870 - Use After Free
CVE-2026-12996		 CWE-416 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139871 - Use After Free
CVE-2026-13117		 CWE-416 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139872 - Improper input validation
CVE-2026-13122		 CWE-20 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 4 more
#VU139873 - Missing release of memory after effective lifetime
CVE-2026-12932		 CWE-401 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139874 - Out-of-bounds write
CVE-2026-11771		 CWE-787 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 3 more
#VU139875 - Missing release of memory after effective lifetime
CVE-2026-13698		 CWE-401 Medium
No
No
 - 02.07.2026 SB2026072869
SB2026072873
SB2026072874
and 4 more
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142		 CWE-770 Medium
No
No
 - 26.06.2026 SB2026062683
SB2026072474
#VU131986 - Out-of-bounds read
CVE-2026-48029		 CWE-125 Medium
No
No
 - 20.05.2026 SB2026052069
SB2026072474
#VU131963 - Out-of-bounds read
CVE-2026-47254		 CWE-125 Medium
No
No
 - 20.05.2026 SB2026052069
SB2026072474
#VU126829 - Out-of-bounds read
CVE-2026-4367		 CWE-125 Medium
No
No
 - 22.04.2026 SB20260422186
SB2026050329
SB2026071783
and 1 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 - 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 61 - 80 out of 16134