Canonical vulnerabilities
224 CVEs and advisories name Canonical as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-47328Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
- CVE-2026-47327NULL pointer dereference in Ubuntu Linux AppArmor notification handling
- CVE-2026-47326Memory leak in Ubuntu Linux AppArmor large notification response allocation
- CVE-2026-49237Local Privilege Escalation in Canonical Multipass
- CVE-2026-49238SFTP Server VM Escape in Canonical Multipass
- CVE-2026-6970authd Denial of Service and Local Privilege Escalation
- CVE-2026-6369Exposed Session Token in canonical-livepatch client snap
- CVE-2026-5412Juju CloudSpec API could leak senstive information
- CVE-2026-5774Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map
- CVE-2025-14551Senstive information disclosure was affecting subiquity
- CVE-2025-15480Senstive information disclosure was affecting ubuntu-desktop-provision
- CVE-2026-34179Update of type field in restricted TLS certificate allows privilege escalation to cluster admin
- CVE-2026-34178Importing a crafted backup leads to project restriction bypass
- CVE-2026-34177VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
- CVE-2026-4370Improper TLS Client/Server authentication and certificate verification on Database Cluster
- CVE-2026-32694Insecure Direct Object Reference attack via predictable secret ID in Juju
- CVE-2026-32693Unauthorized access to Kubernetes secrets in Juju
- CVE-2026-32692Unauthorized update of out-of-scope Vault secrets
- CVE-2026-32691Timing ownership claim attack on new external back-end secrets
- CVE-2026-3888Local Privilege Escalation in snapd
- CVE-2026-28384Authenticated RCE via unsanitized compression_algorithm
- CVE-2025-13350Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel
- CVE-2026-3351Authorization Bypass in LXD GET /1.0/certificates Endpoint
- CVE-2026-1237Vulnerable cross-model authorization in juju.
- CVE-2025-5467Ubuntu Apport Insecure File Permissions Vulnerability
- CVE-2025-6966Null-pointer dereference in python-apt TagSection.keys()
- CVE-2025-54293Path Traversal in LXD Instance Log File Retrieval
- CVE-2025-54292Client-Side Path Traversal in LXD-UI
- CVE-2025-54291Project existence disclosure in LXD images API
- CVE-2025-54290Project Existence Disclosure via Error Handling in LXD Image Export