Skip to contentCanonical Ubuntu vulnerabilities
- linux kernel, canonical ubuntu linux +1 morentfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows...CVE-2018-12929Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in...CVE-2018-12928Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...CVE-2018-5187Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...CVE-2018-5186Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...CVE-2018-12370Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +2 moreWebExtensions bundled with embedded experiments were not correctly checked for proper...CVE-2018-12369Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIn the previous mitigations for Spectre, the resolution or precision of various methods was...CVE-2018-12367Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...CVE-2018-12361Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreService workers can use redirection to avoid the tainting of cross-origin resources in some...CVE-2018-12358Fix available4.3 Medium
- libtiff, canonical ubuntu linux +1 moreHeap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3,...CVE-2018-12900Fix availableEPSS 24.8%8.8 High
- busybox, canonical ubuntu linux, debian linux +2 moreBusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e...CVE-2018-1000517Fix availableEPSS 32.5%9.8 Critical
- php, canonical ubuntu linux, netapp storage automation store +2 moreexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...CVE-2018-12882Fix available9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreIn arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used,...CVE-2018-12904Public exploitFix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as...CVE-2018-10853Fix available7.0 High
- gnu binutils, canonical ubuntu linux +1 morefinish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap...CVE-2018-12699Fix available9.8 Critical
- gnu binutils, canonical ubuntu linux +1 moredemangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...CVE-2018-12698Fix available7.5 High
- gnu binutils, canonical ubuntu linux +1 moreA NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in...CVE-2018-12697Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...CVE-2018-12617Public exploitFix availableEPSS 24.6%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0...CVE-2018-1000204Fix availableDisputed5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to...CVE-2018-12600Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to...CVE-2018-12599Fix available8.8 High
- apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 moreDoS for HTTP/2 connections by crafted requestsCVE-2018-1333Fix availableEPSS 17.0%7.5 High
- libjpeg-turbo, canonical ubuntu linux, debian linux +2 morelibjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by...CVE-2018-1152Fix available6.5 Medium
- wpewebkit wpe webkit, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreThe getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo...CVE-2018-12293Public exploitFix availableEPSS 10.0%8.8 High
- point-to-point protocol project protocol, canonical ubuntu linux +1 moreImproper input validation together with an integer overflow in the EAP-TLS protocol...CVE-2018-11574Fix available9.8 Critical
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out...CVE-2018-12265Fix available8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of...CVE-2018-12264Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race...CVE-2018-5814Fix available7.0 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clientsCVE-2018-5738Fix availableEPSS 11.4%5.3 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption...CVE-2018-12233Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreClient DoS due to large DH parameterCVE-2018-0732Fix availableEPSS 47.0%7.5 High
- file project file, canonical ubuntu linux, opensuse leap +2 moreThe do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to...CVE-2018-10360Fix available6.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-12085Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4246Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4233Public exploitFix availableEPSS 53.8%8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4232Fix available4.3 Medium
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4222Public exploitFix availableEPSS 10.7%8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4218Public exploitFix available8.8 High
- Show moreLoading…