Skip to contentCanonical vulnerabilities
Newest
- canonical cloud-initWhen a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a...CVE-2024-6174Fix available8.8 High
- canonical authdImproper Permission Management in SSH Session HandlingCVE-2025-5689Fix available8.5 High
- canonical apport, ubuntu linux +1 moreRace Condition in Canonical ApportCVE-2025-5054Public exploitFix available4.7 Medium
- canonical mysql-k8s-operatorMySQL K8s charm could leak credentials for root-level user `serverconfig`CVE-2025-243755.0 Medium
- canonical get-workflow-version-actioncanonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception outputCVE-2025-31479Fix available8.2 High
- canonical linux-bluefield, ubuntu package linux-bluefield +1 moreDDoS in Ubuntu package linux-bluefieldCVE-2023-08817.5 High
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- canonical lxdlxd has a restricted TLS certificate privilege escalation when in PKI modeCVE-2024-6219Fix available3.8 Low
- canonical lxdlxd CA certificate sign check bypassCVE-2024-6156Fix available3.8 Low
- canonical authdAuthd allows attacker-controlled usernames to yield controllable UIDsCVE-2024-9312Fix available7.5 High
- canonical authdPAM module may allow accessing with the credentials of another userCVE-2024-9313Fix available8.8 High
- canonical jujuVulnerable juju introspection abstract UNIX domain socketCVE-2024-8038Fix available7.9 High
- canonical jujuVulnerable juju hook tool abstract UNIX domain socketCVE-2024-8037Fix available6.5 Medium
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secretCVE-2024-7558Fix available8.7 High
- canonical anbox cloudAnbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS...CVE-2024-82877.5 High
- canonical jujuJuju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charmCVE-2024-6984Fix available8.8 High
- canonical operatorThe ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI commandCVE-2024-41129Fix available4.4 Medium
- canonical ubuntu desktop provisionAn issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local...CVE-2024-6714Fix available8.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- canonical snap, snapd +1 moresnapd allows $HOME/bin symlinkCVE-2024-1724Fix available6.3 Medium
- canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 moreMarco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks...CVE-2024-6388Fix available5.9 Medium
- canonical netplannetplan leaks the private key of wireguard to local users. A security fix will be released soon.CVE-2022-4968Fix available6.5 Medium
- canonical snapdCVE-2024-5138: snapd snapctl auth bypassCVE-2024-5138Fix available8.1 High
- canonical pebblePebble service manager's file pull API allows access by any userCVE-2024-3250Fix available6.5 Medium
- canonical snapdsnapd will follow archived symlinks when unpacking a filesystemCVE-2024-29069Fix available4.8 Medium
- canonical snapdsnapd non-regular file indefinite blocking readCVE-2024-29068Fix available5.8 Medium
- canonical lxd, tianocore edk2 +1 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS...CVE-2023-49721Fix available6.7 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...CVE-2023-48733Fix available6.7 Medium
- canonical ubuntu pipewire-pulseUbuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio...CVE-2022-4964Fix available5.5 Medium
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome control center +2 moreIn Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...CVE-2023-5616Fix available4.9 Medium
- canonical ubuntu server, ubuntu linux +1 moreA feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows...CVE-2023-5536Public exploit5.0 Medium
- apple ipados, iphone os, macos +4 more +6 moreBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...CVE-2023-45866Public exploitFix available6.3 Medium
- canonical subiquitySensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in...CVE-2023-51825.5 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- amd ryzen 5 7600x, ryzen 7 4800u, apple m1 mac mini +14 more +16 morePVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...CVE-2023-442165.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel...CVE-2023-40283Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2023-3777Fix available7.8 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceCVE-2023-3567Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityCVE-2023-31248Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse after free in io_uring in the Linux KernelCVE-2023-3389Fix available7.8 High
- canonical accountsservice, ubuntu linux, canonical ltd. accountservice +2 moreIn Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free...CVE-2023-3297Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before...CVE-2023-35788Public exploitFix available7.8 High
- canonical landscapeLandscape Open RedirectCVE-2023-325516.1 Medium
- canonical landscapeLandscape's Apache server-status is accessible by defaultCVE-2023-325509.3 Critical
- canonical landscapeLandscape insecure token generationCVE-2023-325496.8 Medium
- canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 moreLocal privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data...CVE-2023-32629Public exploitFix available7.8 High
- canonical ubuntu kernel, ubantu kernel, ubuntu linux +2 moreOn Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission...CVE-2023-2640Public exploitFix availableEPSS 15.2%7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu-linux +1 moreshiftfs lock unbalance in Ubuntu-specific kernelsCVE-2023-2612Fix available4.4 Medium
- canonical snapd, ubuntu linux +1 moreUsing the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the...CVE-2023-1523Fix available10.0 Critical
- canonical cloud-init, ubuntu linux, fedoraproject fedora +2 moresensitive data exposure in cloud-init logsCVE-2023-1786Fix available5.5 Medium
- Show moreLoading…