Skip to contentCanonical vulnerabilities
Newest
- canonical ubuntu linuxOut-of-bounds read in Ubuntu Linux AppArmor notification handlingCVE-2026-47332Fix available5.5 Medium
- canonical ubuntu linuxUse-after-free in Ubuntu Linux AppArmor notification handlingCVE-2026-47331Fix available7.8 High
- canonical ubuntu linuxUse of uninitialized value in Ubuntu Linux AppArmor notification handlingCVE-2026-47330Fix available3.3 Low
- canonical ubuntu linuxIncorrect validation of field size in Ubuntu Linux AppArmor notification responsesCVE-2026-47329Fix available3.3 Low
- canonical ubuntu linuxInvalid pointer deallocation in Ubuntu Linux AppArmor notification handlingCVE-2026-47328Fix available6.1 Medium
- canonical ubuntu linuxNULL pointer dereference in Ubuntu Linux AppArmor notification handlingCVE-2026-47327Fix available3.3 Low
- canonical ubuntu linuxMemory leak in Ubuntu Linux AppArmor large notification response allocationCVE-2026-47326Fix available5.5 Medium
- canonical pdfunitePDFunite 0.41.0 Buffer Overflow via Malformed PDFCVE-2018-253066.9 Medium
- canonical authdauthd Denial of Service and Local Privilege EscalationCVE-2026-6970Fix available7.3 High
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- canonical canonical-livepatch, livepatch client +1 moreExposed Session Token in canonical-livepatch client snapCVE-2026-63695.7 Medium
- canonical jujuJuju CloudSpec API could leak senstive informationCVE-2026-5412Fix available9.9 Critical
- canonical jujuJuju API Server Denial of Service and Authentication Replay via Unsynchronized Token MapCVE-2026-5774Fix available6.1 Medium
- canonical ubuntu, ubuntu subiquity +1 moreSenstive information disclosure was affecting subiquityCVE-2025-145512.7 Low
- canonical ubuntu, ubuntu desktop provision +1 moreSenstive information disclosure was affecting ubuntu-desktop-provisionCVE-2025-154802.7 Low
- canonical lxdUpdate of type field in restricted TLS certificate allows privilege escalation to cluster adminCVE-2026-34179Fix available9.1 Critical
- canonical lxdImporting a crafted backup leads to project restriction bypassCVE-2026-34178Fix available9.1 Critical
- canonical lxdVM lowlevel restriction bypass via raw.apparmor and raw.qemu.confCVE-2026-34177Fix available9.1 Critical
- canonical jujuJuju: Resource poisoningCVE-2025-68153Fix available7.1 High
- canonical jujuJuju: Read All Controller Logs From Compromised WorkloadCVE-2025-68152Fix available6.9 Medium
- canonical jujuImproper TLS Client/Server authentication and certificate verification on Database ClusterCVE-2026-437010.0 Critical
- canonical jujuInsecure Direct Object Reference attack via predictable secret ID in JujuCVE-2026-32694Fix available6.6 Medium
- canonical jujuUnauthorized access to Kubernetes secrets in JujuCVE-2026-32693Fix available8.8 High
- canonical jujuUnauthorized update of out-of-scope Vault secretsCVE-2026-32692Fix available7.6 High
- canonical jujuTiming ownership claim attack on new external back-end secretsCVE-2026-32691Fix available5.3 Medium
- canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 moreLocal Privilege Escalation in snapdCVE-2026-3888Public exploitFix available7.8 High
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...CVE-2026-3497Fix available2.7 Low
- canonical lxdAuthenticated RCE via unsanitized compression_algorithmCVE-2026-28384Fix available9.4 Critical
- canonical ubuntu linuxUse-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernelCVE-2025-13350Fix available7.1 High
- canonical lxdAuthorization Bypass in LXD GET /1.0/certificates EndpointCVE-2026-3351Fix available2.1 Low
- canonical jujuJuju has broken CMR authorizationCVE-2026-12372.1 Low
- canonical apportUbuntu Apport Insecure File Permissions VulnerabilityCVE-2025-54671.9 Low
- canonical python-apt, debian linux +1 moreNull-pointer dereference in python-apt TagSection.keys()CVE-2025-6966Fix available6.9 Medium
- canonical maasPrivilege Escalation in MAAS via Websocket Request ManipulationCVE-2025-70447.7 High
- canonical lxdPath Traversal in LXD Instance Log File RetrievalCVE-2025-54293Fix available7.1 High
- canonical lxdClient-Side Path Traversal in LXD-UICVE-2025-542924.8 Medium
- canonical lxdProject existence disclosure in LXD images APICVE-2025-54291Fix available6.9 Medium
- canonical lxdProject Existence Disclosure via Error Handling in LXD Image ExportCVE-2025-54290Fix available6.9 Medium
- canonical lxdPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations APICVE-2025-54289Fix available7.4 High
- canonical lxdSource Container Identification Vulnerability via cmdline Spoofing in devLXD ServerCVE-2025-54288Fix available5.1 Medium
- canonical lxdArbitrary File Read via Template Injection in Snapshot PatternsCVE-2025-54287Fix available7.1 High
- canonical lxdCSRF Vulnerability When Using Client Certificate Authentication with the LXD-UICVE-2025-54286Fix available7.5 High
- canonical maas, metal as a service +1 moreDue to insufficient verification, an attacker could use a malicious client to bypass...CVE-2024-61079.6 Critical
- canonical multipassLPE on Multipass for macOSCVE-2025-51997.3 High
- canonical jujuArbitrary executable upload via authenticated endpointCVE-2025-0928Fix available8.8 High
- canonical jujuZip slip vulnerability in JujuCVE-2025-53513Fix available8.8 High
- canonical jujuSensitive log retrieval in JujuCVE-2025-53512Fix available6.5 Medium
- canonical juju utils, juju\/utils +1 moreKey leakage in juju/utils certificatesCVE-2025-6224Fix available6.5 Medium
- sudo, canonical ubuntu linux, debian linux +5 more +7 moreSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...CVE-2025-32463In KEVPublic exploitFix availableEPSS 56.3%9.3 Critical
- canonical cloud-initcloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with...CVE-2024-11584Fix available5.9 Medium
- Show moreLoading…