Canonical vulnerabilities
224 CVEs and advisories name Canonical as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-54289Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API
- CVE-2025-54288Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server
- CVE-2025-54287Arbitrary File Read via Template Injection in Snapshot Patterns
- CVE-2025-54286CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
- CVE-2024-6107Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region.
- CVE-2025-5199LPE on Multipass for macOS
- CVE-2025-0928Arbitrary executable upload via authenticated endpoint
- CVE-2025-53513Zip slip vulnerability in Juju
- CVE-2025-53512Sensitive log retrieval in Juju
- CVE-2025-6224Key leakage in juju/utils certificates
- CVE-2024-11584cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions,
- CVE-2024-6174When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address.
- CVE-2025-5689Improper Permission Management in SSH Session Handling
- CVE-2025-5054Race Condition in Canonical Apport
- CVE-2023-5616In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activa
- CVE-2025-24375MySQL K8s charm could leak credentials for root-level user `serverconfig`
- CVE-2025-31479canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output
- CVE-2023-0092An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from th
- CVE-2022-1736Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.
- CVE-2020-11936gdbus setgid privilege escalation
- CVE-2022-28653Users can consume unlimited disk space in /var/crash
- CVE-2024-6219Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its rest
- CVE-2024-6156Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust stor
- CVE-2024-11586Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected.
- CVE-2024-9312Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions.
- CVE-2024-9313Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform an
- CVE-2024-8038Vulnerable juju introspection abstract UNIX domain socket.
- CVE-2024-8037Vulnerable juju hook tool abstract UNIX domain socket.
- CVE-2024-7558JUJU_CONTEXT_ID is a predictable authentication secret.
- CVE-2024-8287Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent.