en
Canonical is a multinational technology company behind Ubuntu and related open source projects. It coordinates development and provides commercial support, cloud and edge solutions, and tooling for operating systems, containers, and orchestration across global markets. Core offerings span open source management, cloud provisioning, and developer tooling, with a broad geographic footprint and active open source community involvement.
As of 11/13/2026, Canonical recorded 19 security vulnerabilities in the last 90 days across 8 products, including 10 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LXD had the most security vulnerabilities in the Canonical ecosystem, with 9 vulnerabilities—approximately 47.37% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-47332Out-of-bounds read in Ubuntu Linux AppArmor notification handlingCVE-2026-47331Use-after-free in Ubuntu Linux AppArmor notification handlingCVE-2026-47330Use of uninitialized value in Ubuntu Linux AppArmor notification handlingCVE-2026-47329Incorrect validation of field size in Ubuntu Linux AppArmor notification responsesCVE-2026-47328Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-47332Out-of-bounds read in Ubuntu Linux AppArmor notification handling | Exploitation statusNot exploited | FixYes |
| Published05/28/2026 |
| SeverityMedium |
CVE-2026-47331Use-after-free in Ubuntu Linux AppArmor notification handling | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityHigh |
|---|
CVE-2026-47330Use of uninitialized value in Ubuntu Linux AppArmor notification handling | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityLow |
|---|
CVE-2026-47329Incorrect validation of field size in Ubuntu Linux AppArmor notification responses | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityLow |
|---|
CVE-2026-47328Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityMedium |
|---|
CVE-2026-47327NULL pointer dereference in Ubuntu Linux AppArmor notification handling | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityLow |
|---|
CVE-2026-47326Memory leak in Ubuntu Linux AppArmor large notification response allocation | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published05/28/2026 | SeverityMedium |
|---|
CVE-2026-6970authd Denial of Service and Local Privilege Escalation | Exploitation statusNot exploited | FixYes | Affected productauthd | Published04/27/2026 | SeverityHigh |
|---|
CVE-2026-6369Exposed Session Token in canonical-livepatch client snap | Exploitation statusNot exploited | FixYes | Affected productcanonical-livepatch | Published04/20/2026 | SeverityMedium |
|---|
CVE-2026-5774Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map | Exploitation statusActively exploited | FixYes | Affected productJuju | Published04/10/2026 | SeverityMedium |
|---|
CVE-2026-5412Juju CloudSpec API could leak senstive information | Exploitation statusNot exploited | FixYes | Affected productJuju | Published04/10/2026 | SeverityCritical |
|---|
CVE-2026-34179Update of type field in restricted TLS certificate allows privilege escalation to cluster admin | Exploitation statusActively exploited | FixYes | Affected productLXD | Published04/09/2026 | SeverityCritical |
|---|
CVE-2026-34178Importing a crafted backup leads to project restriction bypass | Exploitation statusActively exploited | FixYes | Affected productLXD | Published04/09/2026 | SeverityCritical |
|---|
CVE-2026-34177VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf | Exploitation statusActively exploited | FixYes | Affected productLXD | Published04/09/2026 | SeverityCritical |
|---|
CVE-2025-15480Senstive information disclosure was affecting ubuntu-desktop-provision | Exploitation statusNot exploited | FixYes | Affected productUbuntu | Published04/09/2026 | SeverityLow |
|---|
CVE-2025-14551Senstive information disclosure was affecting subiquity | Exploitation statusNot exploited | FixYes | Affected productUbuntu | Published04/09/2026 | SeverityLow |
|---|
CVE-2026-4370Improper TLS Client/Server authentication and certificate verification on Database Cluster | Exploitation statusActively exploited | FixYes | Affected productJuju | Published04/01/2026 | SeverityCritical |
|---|
CVE-2026-32694Insecure Direct Object Reference attack via predictable secret ID in Juju | Exploitation statusActively exploited | FixYes | Affected productJuju | Published03/18/2026 | SeverityMedium |
|---|
CVE-2026-32693Unauthorized access to Kubernetes secrets in Juju | Exploitation statusNot exploited | FixYes | Affected productJuju | Published03/18/2026 | SeverityHigh |
|---|
CVE-2026-32692Unauthorized update of out-of-scope Vault secrets | Exploitation statusNot exploited | FixYes | Affected productJuju | Published03/18/2026 | SeverityHigh |
|---|
CVE-2026-32691Timing ownership claim attack on new external back-end secrets | Exploitation statusNot exploited | FixYes | Affected productJuju | Published03/18/2026 | SeverityMedium |
|---|
CVE-2026-3888Local privilege escalation in Canonical snapd through private /tmp cleanup | Exploitation statusNot exploited | FixYes | Affected productsnapd | Published03/17/2026 | SeverityHigh |
|---|
CVE-2026-28384Authenticated RCE via unsanitized compression_algorithm | Exploitation statusActively exploited | FixYes | Affected productLXD | Published03/12/2026 | SeverityCritical |
|---|
CVE-2025-13350Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel | Exploitation statusNot exploited | FixYes | Affected productUbuntu Linux | Published03/05/2026 | SeverityHigh |
|---|
CVE-2026-3351Authorization Bypass in LXD GET /1.0/certificates Endpoint | Exploitation statusNot exploited | FixYes | Affected productLXD | Published03/03/2026 | SeverityLow |
|---|
CVE-2026-1237CVE-2026-1237 | Exploitation statusNot exploited | FixNo | Affected productJuju | Published01/28/2026 | SeverityLow |
|---|
CVE-2025-5467Ubuntu Apport Insecure File Permissions Vulnerability | Exploitation statusActively exploited | FixYes | Affected productapport | Published12/10/2025 | SeverityLow |
|---|
CVE-2025-6966Null-pointer dereference in python-apt TagSection.keys() | Exploitation statusNot exploited | FixYes | Affected productpython-apt | Published12/05/2025 | SeverityMedium |
|---|
CVE-2025-54293Path Traversal in LXD Instance Log File Retrieval | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityHigh |
|---|
CVE-2025-54292Client-Side Path Traversal in LXD-UI | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityMedium |
|---|
CVE-2025-54291Project existence disclosure in LXD images API | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityMedium |
|---|
CVE-2025-54290Project Existence Disclosure via Error Handling in LXD Image Export | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityMedium |
|---|
CVE-2025-54289Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API | Exploitation statusNot exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityHigh |
|---|
CVE-2025-54288Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityMedium |
|---|
CVE-2025-54287Arbitrary File Read via Template Injection in Snapshot Patterns | Exploitation statusActively exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityHigh |
|---|
CVE-2025-54286CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI | Exploitation statusNot exploited | FixYes | Affected productLXD | Published10/02/2025 | SeverityHigh |
|---|
CVE-2024-6107CVE-2024-6107 | Exploitation statusActively exploited | FixYes | Affected productMAAS | Published07/21/2025 | SeverityCritical |
|---|
CVE-2025-5199Incorrect default permissions enable local privilege escalation in Canonical Multipass on macOS | Exploitation statusActively exploited | FixYes | Affected productMultipass | Published07/11/2025 | SeverityHigh |
|---|
CVE-2025-53513Zip slip vulnerability in Juju | Exploitation statusActively exploited | FixYes | Affected productJuju | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-53512Sensitive log retrieval in Juju | Exploitation statusActively exploited | FixYes | Affected productJuju | Published07/08/2025 | SeverityMedium |
|---|
CVE-2025-0928Arbitrary executable upload via authenticated endpoint | Exploitation statusActively exploited | FixYes | Affected productJuju | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-6224Key leakage in juju/utils certificates | Exploitation statusActively exploited | FixYes | Affected productJuju utils | Published07/01/2025 | SeverityMedium |
|---|
CVE-2024-6174CVE-2024-6174 | Exploitation statusNot exploited | FixYes | Affected productcloud-init | Published06/26/2025 | SeverityHigh |
|---|
CVE-2024-11584CVE-2024-11584 | Exploitation statusNot exploited | FixYes | Affected productcloud-init | Published06/26/2025 | SeverityMedium |
|---|
CVE-2025-5689Improper Permission Management in SSH Session Handling | Exploitation statusNot exploited | FixYes | Affected productauthd | Published06/16/2025 | SeverityHigh |
|---|
CVE-2025-5054Race Condition in Canonical Apport | Exploitation statusActively exploited | FixYes | Affected productapport | Published05/30/2025 | SeverityMedium |
|---|
CVE-2025-24375MySQL K8s charm could leak credentials for root-level user `serverconfig` | Exploitation statusNot exploited | FixNo | Affected productmysql-k8s-operator | Published04/09/2025 | SeverityMedium |
|---|
CVE-2025-31479canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output | Exploitation statusNot exploited | FixYes | Affected productget-workflow-version-action | Published04/02/2025 | SeverityHigh |
|---|
CVE-2024-29069snapd will follow archived symlinks when unpacking a filesystem | Exploitation statusNot exploited | FixYes | Affected productsnapd | Published07/25/2024 | SeverityMedium |
|---|
CVE-2024-29068snapd non-regular file indefinite blocking read | Exploitation statusNot exploited | FixYes | Affected productsnapd | Published07/25/2024 | SeverityMedium |
|---|
134 Results | Page 2 of 3