Ubuntu vulnerabilities

Products

• Linux 64
• Libvirt 22
• Linux 7
• Maas 7
• Ubuntu 7
• Accountsservice 5
• Grub2 In Ubuntu 3
• Linux Kernel 3
• Python-apt 3
• Shiftfs In The Linux Kernel 3
• Apport 2
• Language-selector 2
• Linux Kernel 2
• Metal As A Service 2
• Tmux 2
• Unity8 2

Newest

• debian apt APT RCE via hard link reuse CVE-2026-109518 Public exploitFix available 7.7 HighNovember 4, 2026
• canonical maas RPC secret disclosure via vendor data endpoint in Canonical MAAS CVE-2026-12392 5.3 MediumOctober 2, 2026
• canonical accountsservice accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts CVE-2026-61898 Fix available 7.8 HighJuly 21, 2026
• canonical accountsservice accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts CVE-2026-61897 Fix available 7.8 HighJuly 21, 2026
• ubuntu tmux tmux image.c image_free use after free CVE-2026-11623 Fix available 2.0 LowJune 9, 2026
• ubuntu libefiboot, red hat enterprise linux 10, enterprise linux 7 +4 more +6 more Efivar: efivar: denial of service due to stack overflow in device path node parsing CVE-2026-6862 Fix available 5.5 MediumApril 22, 2026
• debian linux, openbsd openssh, canonical ubuntu linux +37 more +39 more Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... CVE-2026-3497 Fix available 2.7 LowMarch 12, 2026
• canonical python-apt, debian linux +1 more Null-pointer dereference in python-apt TagSection.keys() CVE-2025-6966 Fix available 6.9 MediumDecember 5, 2025
• canonical maas Privilege Escalation in MAAS via Websocket Request Manipulation CVE-2025-7044 7.7 HighDecember 3, 2025
• tianocore edk2 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu CVE-2025-2486 Fix available 3.7 LowNovember 26, 2025
• canonical maas, metal as a service +1 more Due to insufficient verification, an attacker could use a malicious client to bypass... CVE-2024-6107 9.6 CriticalJuly 21, 2025
• canonical linux-bluefield, ubuntu package linux-bluefield +1 more DDoS in Ubuntu package linux-bluefield CVE-2023-0881 7.5 HighMarch 31, 2025
• canonical authd Authd allows attacker-controlled usernames to yield controllable UIDs CVE-2024-9312 Fix available 7.5 HighOctober 10, 2024
• bellard quickjs, ubuntu +1 more QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime... CVE-2024-33263 Fix available 4.0 MediumApril 26, 2024
• redhat libvirt, fedoraproject fedora, redhat enterprise linux +2 more A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... CVE-2023-2700 Fix available 5.5 MediumMay 15, 2023
• canonical accountsservice, ubuntu linux, linux +2 more Accountsservice incorrectly drops privileges CVE-2022-1804 Fix available 5.5 MediumMay 24, 2022
• redhat libvirt, netapp ontap select deploy administration utility +1 more A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method... CVE-2022-0897 Fix available 4.3 MediumMarch 25, 2022
• redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 more A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself... CVE-2021-4147 Fix available 6.5 MediumJanuary 4, 2022
• redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 more A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in... CVE-2021-3975 Public exploitFix available 6.5 MediumNovember 24, 2021
• canonical accountsservice, ubuntu linux +1 more Free of static data in accountsservice CVE-2021-3939 Fix available 7.8 HighNovember 16, 2021
• redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 more An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It... CVE-2021-3667 Fix available 6.5 MediumAugust 23, 2021
• redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 more A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels... CVE-2021-3631 Fix available 6.3 MediumJuly 27, 2021
• redhat libvirt A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent... CVE-2020-10701 Fix available 6.5 MediumMay 27, 2021
• redhat libvirt, netapp ontap select deploy administration utility +1 more A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It... CVE-2021-3559 6.5 MediumMay 24, 2021
• linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more The overlayfs implementation in the linux kernel did not properly validate with respect to user... CVE-2021-3493 In KEVPublic exploitFix available EPSS 49.2% 8.8 HighApril 15, 2021
• canonical ubuntu linux, ubuntu linux kernel +1 more Ubuntu linux kernel shiftfs file system double free vulnerability CVE-2021-3492 Public exploitFix available 8.8 HighApril 15, 2021
• tmux tmux stack buffer overflow in function input_csi_dispatch_sgr_colon CVE-2020-27347 Public exploitFix available 8.8 HighNovember 4, 2020
• redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP... CVE-2020-14301 Fix available 6.5 MediumNovember 3, 2020
• freedesktop accountsservice accountsservice .pam_environment infinite loop CVE-2020-16127 Fix available 2.8 LowNovember 3, 2020
• freedesktop accountsservice accountsservice drops ruid, allows unprivileged users to send it signals CVE-2020-16126 Public exploitFix available 3.3 LowNovember 3, 2020
• redhat libvirt, opensuse leap +1 more A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,... CVE-2020-25637 Public exploitFix available 6.7 MediumOctober 2, 2020
• redhat libvirt, enterprise linux +1 more A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the... CVE-2020-14339 Fix available 8.8 HighAugust 13, 2020
• ubuntu libvirt, canonical ubuntu linux +1 more Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability CVE-2020-15708 Fix available 9.3 CriticalAugust 4, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 more aufs: improperly managed inode reference counts in the vfsub_dentry_open() method CVE-2020-11935 Fix available 4.4 MediumJune 29, 2020
• signond project signond, ubports ubuntu touch, ubuntu signon +2 more Online Accounts Signon daemon gives out all oauth tokens to any app CVE-2014-1423 5.9 MediumMay 7, 2020
• libvirt A NULL pointer dereference was found in the libvirt API responsible introduced in upstream... CVE-2020-10703 Fix available 6.5 MediumApril 13, 2020
• canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 more Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 CVE-2020-8832 Fix available 5.5 MediumMarch 5, 2020
• canonical python-apt python-apt downloads from untrusted sources CVE-2019-15796 Fix available 4.7 MediumJanuary 20, 2020
• canonical python-apt python-apt uses MD5 for validation CVE-2019-15795 Fix available 4.7 MediumJanuary 20, 2020
• canonical ubuntu cobbler, cobbler +1 more A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu... CVE-2012-2092 5.9 MediumDecember 6, 2019
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Mishandling of file-system uid/gid with namespaces in shiftfs CVE-2019-15793 Public exploitFix available 6.5 MediumNovember 12, 2019
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Type confusion in shiftfs CVE-2019-15792 Public exploitFix available 7.1 HighNovember 12, 2019
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Reference count underflow in shiftfs CVE-2019-15791 Public exploitFix available 7.1 HighNovember 12, 2019
• linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs CVE-2019-15794 Public exploitFix available 7.1 HighNovember 8, 2019
• apport project apport Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml CVE-2019-7307 Fix available 6.5 MediumJuly 9, 2019
• canonical whoopsie, ubuntu linux +1 more Integer overflow in whoopsie results in out-of-bounds heap write CVE-2019-11476 Fix available 6.5 MediumJuly 9, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x... CVE-2019-10168 Fix available 8.8 HighJune 21, 2019
• Show olderLoading…