Ubuntu vulnerabilities
40 CVEs and advisories name Ubuntu as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109518APT RCE via hard link reuse
- CVE-2026-3497Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
- CVE-2025-7044Privilege Escalation in MAAS via Websocket Request Manipulation
- CVE-2025-2486UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
- CVE-2023-0881DDoS in Ubuntu package linux-bluefield
- CVE-2022-1804Accountsservice incorrectly drops privileges
- CVE-2020-11935aufs: improperly managed inode reference counts in the vfsub_dentry_open() method
- CVE-2021-3939Free of static data in accountsservice
- CVE-2021-3493The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities
- CVE-2021-3492Ubuntu linux kernel shiftfs file system double free vulnerability
- CVE-2020-27347tmux stack buffer overflow in function input_csi_dispatch_sgr_colon
- CVE-2020-15708Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability
- CVE-2020-15707GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
- CVE-2020-15706GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.
- CVE-2020-15705GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
- CVE-2014-1423Online Accounts Signon daemon gives out all oauth tokens to any app
- CVE-2019-15794Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs
- CVE-2019-15793Mishandling of file-system uid/gid with namespaces in shiftfs
- CVE-2019-15792Type confusion in shiftfs
- CVE-2019-15791Reference count underflow in shiftfs
- CVE-2020-8832Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615
- CVE-2012-2092A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the
- CVE-2019-7307Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
- CVE-2019-11476Integer overflow in whoopsie results in out-of-bounds heap write
- CVE-2016-1587The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the
- CVE-2016-1586A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versi
- CVE-2016-1584Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most
- CVE-2016-1579UDM doesn't check for confinement before running post-processing commands
- CVE-2016-1573Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash
- CVE-2015-1343unity-scope-gdrive search feature logs search terms to syslog