Canonical Ubuntu vulnerabilities

• canonical ubuntu pro for wsl wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments CVE-2026-102371 Fix available 5.7 MediumSeptember 29, 2026
• canonical ubuntu 22.04 lts, ubuntu 24.04 lts, ubuntu 26.04 lts +2 more snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup CVE-2026-8933 Public exploitFix available 7.8 HighJuly 21, 2026
• canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 more snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates CVE-2026-15226 Fix available 8.4 HighJuly 21, 2026
• canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 more AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd CVE-2024-5300 Fix available 5.6 MediumJuly 21, 2026
• canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +4 more +6 more ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs CVE-2026-12391 Fix available 5.0 MediumJuly 16, 2026
• canonical ubuntu 14.04 lts, ubuntu 16.04 lts, ubuntu 18.04 lts +5 more +7 more ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution CVE-2026-11386 Fix available 9.0 CriticalJuly 16, 2026
• canonical ubuntu 14.04 lts, ubuntu 16.04 lts, ubuntu 18.04 lts +5 more +7 more ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line CVE-2026-9494 Fix available 5.5 MediumJuly 16, 2026
• canonical ubuntu Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal CVE-2026-10037 Fix available 8.8 HighJuly 8, 2026
• canonical ubuntu 20.04 lts, ubuntu 22.04 lts, ubuntu 24.04 lts +2 more +4 more Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment CVE-2026-12249 Fix available 9.0 CriticalJune 22, 2026
• canonical ubuntu linux NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation CVE-2026-47337 Fix available 3.3 LowMay 28, 2026
• canonical ubuntu linux Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules CVE-2026-47336 Fix available 3.3 LowMay 28, 2026
• canonical ubuntu linux NULL pointer dereference in Ubuntu Linux AppArmor notification handling CVE-2026-47335 Fix available 5.5 MediumMay 28, 2026
• canonical ubuntu linux Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling CVE-2026-47334 Fix available 5.5 MediumMay 28, 2026
• canonical ubuntu linux Out-of-bounds read in Ubuntu Linux AppArmor notification handling CVE-2026-47333 Fix available 7.8 HighMay 28, 2026
• canonical ubuntu linux Out-of-bounds read in Ubuntu Linux AppArmor notification handling CVE-2026-47332 Fix available 5.5 MediumMay 28, 2026
• canonical ubuntu linux Use-after-free in Ubuntu Linux AppArmor notification handling CVE-2026-47331 Fix available 7.8 HighMay 28, 2026
• canonical ubuntu linux Use of uninitialized value in Ubuntu Linux AppArmor notification handling CVE-2026-47330 Fix available 3.3 LowMay 28, 2026
• canonical ubuntu linux Incorrect validation of field size in Ubuntu Linux AppArmor notification responses CVE-2026-47329 Fix available 3.3 LowMay 28, 2026
• canonical ubuntu linux Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling CVE-2026-47328 Fix available 6.1 MediumMay 28, 2026
• canonical ubuntu linux NULL pointer dereference in Ubuntu Linux AppArmor notification handling CVE-2026-47327 Fix available 3.3 LowMay 28, 2026
• canonical ubuntu linux Memory leak in Ubuntu Linux AppArmor large notification response allocation CVE-2026-47326 Fix available 5.5 MediumMay 28, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• canonical ubuntu, ubuntu subiquity +1 more Senstive information disclosure was affecting subiquity CVE-2025-14551 2.7 LowApril 9, 2026
• canonical ubuntu, ubuntu desktop provision +1 more Senstive information disclosure was affecting ubuntu-desktop-provision CVE-2025-15480 2.7 LowApril 9, 2026
• canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 more Local Privilege Escalation in snapd CVE-2026-3888 Public exploitFix available 7.8 HighMarch 17, 2026
• debian linux, openbsd openssh, canonical ubuntu linux +37 more +39 more Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... CVE-2026-3497 Fix available 2.7 LowMarch 12, 2026
• canonical ubuntu linux Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel CVE-2025-13350 Fix available 7.1 HighMarch 5, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• canonical apport, ubuntu linux +1 more Race Condition in Canonical Apport CVE-2025-5054 Public exploitFix available 4.7 MediumMay 29, 2025
• openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 more Openssh: denial-of-service in openssh CVE-2025-26466 Public exploitFix available EPSS 38.7% 5.9 MediumFebruary 18, 2025
• canonical ubuntu desktop provision An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local... CVE-2024-6714 Fix available 8.8 HighJuly 22, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 more Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks... CVE-2024-6388 Fix available 5.9 MediumJune 27, 2024
• canonical ubuntu pipewire-pulse Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio... CVE-2022-4964 Fix available 5.5 MediumJanuary 23, 2024
• canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome control center +2 more In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system... CVE-2023-5616 Fix available 4.9 MediumDecember 13, 2023
• canonical ubuntu server, ubuntu linux +1 more A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows... CVE-2023-5536 Public exploit 5.0 MediumDecember 11, 2023
• apple ipados, iphone os, macos +4 more +6 more Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate... CVE-2023-45866 Public exploitFix available 6.3 MediumDecember 1, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• amd ryzen 5 7600x, ryzen 7 4800u, apple m1 mac mini +14 more +16 more PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software... CVE-2023-44216 5.3 MediumSeptember 26, 2023
• debian linux, linux kernel, canonical ubuntu linux +3 more +5 more An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel... CVE-2023-40283 Fix available 7.8 HighAugust 14, 2023
• debian linux, linux kernel, canonical ubuntu linux +1 more +3 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2023-3777 Fix available 7.8 HighAugust 3, 2023
• linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 more Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race CVE-2023-3567 Fix available 7.1 HighJuly 24, 2023
• debian linux, linux kernel, canonical ubuntu linux +1 more +3 more Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability CVE-2023-31248 Fix available 7.8 HighJuly 5, 2023
• debian linux, linux kernel, canonical ubuntu linux +1 more +3 more Use after free in io_uring in the Linux Kernel CVE-2023-3389 Fix available 7.8 HighJune 28, 2023
• canonical accountsservice, ubuntu linux, canonical ltd. accountservice +2 more In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free... CVE-2023-3297 Fix available 8.1 HighJune 28, 2023
• debian linux, linux kernel, canonical ubuntu linux +5 more +7 more An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before... CVE-2023-35788 Public exploitFix available 7.8 HighJune 16, 2023
• canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 more Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data... CVE-2023-32629 Public exploitFix available 7.8 HighJune 6, 2023
• canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 more On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission... CVE-2023-2640 Public exploitFix available EPSS 15.2% 7.8 HighJune 6, 2023
• canonical ubuntu linux, canonical ltd. ubuntu-linux +1 more shiftfs lock unbalance in Ubuntu-specific kernels CVE-2023-2612 Fix available 4.4 MediumMay 30, 2023
• canonical snapd, ubuntu linux +1 more Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the... CVE-2023-1523 Fix available 10.0 CriticalMay 25, 2023
• Show olderLoading…