en
Ubuntu is an open-source Linux operating system produced and maintained by Canonical with community participation. It provides a Debian-based platform for general-purpose computing, servers, cloud workloads, containers, IoT, and enterprise infrastructure, with regular releases, long-term support options, security maintenance, and commercial support.
As of 11/08/2026, Ubuntu recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, APT had the most security vulnerabilities in the Ubuntu ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-109518Hard-link package replacement in Debian and Ubuntu APT enables root code executionCVE-2026-3497Ubuntu OpenSSH GSSAPI error handling flaw can cause denial of service and memory disclosureCVE-2025-7044Privilege Escalation in MAAS via Websocket Request ManipulationCVE-2025-2486UEFI Shell accessible in AAVMF with Secure Boot enabled on UbuntuCVE-2023-0881DDoS in Ubuntu package linux-bluefield| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-109518Hard-link package replacement in Debian and Ubuntu APT enables root code execution | Exploitation statusNot confirmed | FixYes |
| Published11/04/2026 |
| SeverityHigh |
CVE-2026-3497Ubuntu OpenSSH GSSAPI error handling flaw can cause denial of service and memory disclosure | Exploitation statusNot exploited | FixYes | Affected productopenssh | Published03/12/2026 | SeverityMedium |
|---|
CVE-2025-7044Privilege Escalation in MAAS via Websocket Request Manipulation | Exploitation statusNot exploited | FixYes | Affected productmaas | Published12/03/2025 | SeverityHigh |
|---|
CVE-2025-2486UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu | Exploitation statusNot exploited | FixYes | Affected productedk2 | Published11/26/2025 | SeverityLow |
|---|
CVE-2023-0881DDoS in Ubuntu package linux-bluefield | Exploitation statusNot exploited | FixYes | Affected productUbuntu package linux-bluefield | Published03/31/2025 | SeverityHigh |
|---|
CVE-2022-1804Accountsservice incorrectly drops privileges | Exploitation statusNot exploited | FixYes | Affected productLinux | Published03/25/2025 | SeverityMedium |
|---|
CVE-2021-3939Free of static data in accountsservice | Exploitation statusNot confirmed | FixYes | Affected productaccountsservice | Published11/17/2021 | SeverityHigh |
|---|
CVE-2021-3493CVE-2021-3493 | Exploitation statusKEV | FixYes | Affected productLinux kernel | Published04/17/2021 | SeverityHigh |
|---|
CVE-2021-3492Ubuntu linux kernel shiftfs file system double free vulnerability | Exploitation statusNot confirmed | FixYes | Affected productLinux kernel | Published04/17/2021 | SeverityHigh |
|---|
CVE-2020-27347tmux stack buffer overflow in function input_csi_dispatch_sgr_colon | Exploitation statusNot confirmed | FixYes | Affected producttmux | Published11/06/2020 | SeverityHigh |
|---|
CVE-2020-15708World-writable libvirt control socket enables privilege escalation on Ubuntu | Exploitation statusNot confirmed | FixYes | Affected productlibvirt | Published11/06/2020 | SeverityCritical |
|---|
CVE-2020-15707GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. | Exploitation statusNot confirmed | FixYes | Affected productgrub2 in Ubuntu | Published07/29/2020 | SeverityMedium |
|---|
CVE-2020-15706GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. | Exploitation statusNot confirmed | FixYes | Affected productgrub2 in Ubuntu | Published07/29/2020 | SeverityMedium |
|---|
CVE-2020-15705GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim | Exploitation statusNot confirmed | FixYes | Affected productgrub2 in Ubuntu | Published07/29/2020 | SeverityMedium |
|---|
CVE-2014-1423Online Accounts Signon daemon gives out all oauth tokens to any app | Exploitation statusNot confirmed | FixYes | Affected productsignon | Published05/07/2020 | SeverityMedium |
|---|
CVE-2019-15794Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs | Exploitation statusNot confirmed | FixYes | Affected productLinux kernel | Published04/23/2020 | SeverityHigh |
|---|
CVE-2019-15793Mishandling of file-system uid/gid with namespaces in shiftfs | Exploitation statusNot confirmed | FixYes | Affected productShiftfs in the Linux kernel | Published04/23/2020 | SeverityMedium |
|---|
CVE-2019-15792Type confusion in shiftfs | Exploitation statusNot confirmed | FixYes | Affected productShiftfs in the Linux kernel | Published04/23/2020 | SeverityHigh |
|---|
CVE-2019-15791Reference count underflow in shiftfs | Exploitation statusNot confirmed | FixYes | Affected productShiftfs in the Linux kernel | Published04/23/2020 | SeverityHigh |
|---|
CVE-2020-8832Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 | Exploitation statusNot confirmed | FixYes | Affected product18.04 LTS (bionic) Linux kernel | Published04/09/2020 | SeverityMedium |
|---|
CVE-2012-2092CVE-2012-2092 | Exploitation statusNot confirmed | FixNo | Affected productCobbler | Published12/06/2019 | SeverityUnknown |
|---|
CVE-2019-7307Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml | Exploitation statusNot confirmed | FixNo | Affected productApport | Published08/29/2019 | SeverityMedium |
|---|
CVE-2019-11476Integer overflow in whoopsie results in out-of-bounds heap write | Exploitation statusNot confirmed | FixNo | Affected productWhoopsie | Published08/29/2019 | SeverityMedium |
|---|
CVE-2016-1587CVE-2016-1587 | Exploitation statusNot confirmed | FixYes | Affected productsnapweb | Published04/22/2019 | SeverityHigh |
|---|
CVE-2016-1586CVE-2016-1586 | Exploitation statusNot confirmed | FixYes | Affected productOxide | Published04/22/2019 | SeverityLow |
|---|
CVE-2016-1584Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most | Exploitation statusNot confirmed | FixNo | Affected productUnity8 | Published04/22/2019 | SeverityLow |
|---|
CVE-2016-1579UDM doesn't check for confinement before running post-processing commands | Exploitation statusNot confirmed | FixYes | Affected productUbuntu Download Manager | Published04/22/2019 | SeverityMedium |
|---|
CVE-2016-1573Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash | Exploitation statusNot confirmed | FixYes | Affected productUnity8 | Published04/22/2019 | SeverityMedium |
|---|
CVE-2015-1343unity-scope-gdrive search feature logs search terms to syslog | Exploitation statusNot confirmed | FixNo | Affected productunity-scope-gdrive | Published04/22/2019 | SeverityLow |
|---|
CVE-2015-1341Apport privilege escalation through Python module imports | Exploitation statusNot confirmed | FixYes | Affected productApport | Published04/22/2019 | SeverityHigh |
|---|
CVE-2015-1340chmod race in doUidshiftIntoContainer | Exploitation statusNot confirmed | FixYes | Affected productLXD | Published04/22/2019 | SeverityHigh |
|---|
CVE-2015-1327Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access | Exploitation statusNot confirmed | FixYes | Affected productContent Hub | Published04/22/2019 | SeverityLow |
|---|
CVE-2015-1326python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp | Exploitation statusNot confirmed | FixYes | Affected productpython-dbusmock | Published04/22/2019 | SeverityMedium |
|---|
CVE-2015-1320Probe-and-enlist for SeaMicro chassis writes password to the log | Exploitation statusNot confirmed | FixYes | Affected productmaas | Published04/22/2019 | SeverityMedium |
|---|
CVE-2015-1316Juju Joyent provider uploads user's private ssh key by default | Exploitation statusNot confirmed | FixYes | Affected productJuju | Published04/22/2019 | SeverityMedium |
|---|
CVE-2014-1428uuid.uuid1() is not suitable as an unguessable identifier/token | Exploitation statusNot confirmed | FixYes | Affected productmaas | Published04/22/2019 | SeverityLow |
|---|
CVE-2014-1427MAAS API vulnerable to CSRF attack | Exploitation statusNot confirmed | FixYes | Affected productmaas | Published04/22/2019 | SeverityCritical |
|---|
CVE-2014-1426get_file_by_name does not check owner | Exploitation statusNot confirmed | FixYes | Affected productmaas | Published04/22/2019 | SeverityHigh |
|---|
CVE-2018-6557Insecure temporary file use in base-files | Exploitation statusNot confirmed | FixYes | Affected productbase-files | Published08/21/2018 | SeverityUnknown |
|---|
39 Results | Page 1 of 1