# cve.now: Ubuntu The newest entries naming Ubuntu as an affected vendor (up to 200), of 40 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-109518](https://cve.now/CVE-2026-109518.md): APT RCE via hard link reuse (CVSS 7.7) - [CVE-2026-3497](https://cve.now/CVE-2026-3497.md): Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. (CVSS 2.7) - [CVE-2025-7044](https://cve.now/CVE-2025-7044.md): Privilege Escalation in MAAS via Websocket Request Manipulation (CVSS 7.7) - [CVE-2025-2486](https://cve.now/CVE-2025-2486.md): UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu (CVSS 3.7) - [CVE-2023-0881](https://cve.now/CVE-2023-0881.md): DDoS in Ubuntu package linux-bluefield (CVSS 7.5) - [CVE-2022-1804](https://cve.now/CVE-2022-1804.md): Accountsservice incorrectly drops privileges (CVSS 5.5) - [CVE-2020-11935](https://cve.now/CVE-2020-11935.md): aufs: improperly managed inode reference counts in the vfsub\_dentry\_open() method (CVSS 4.4) - [CVE-2021-3939](https://cve.now/CVE-2021-3939.md): Free of static data in accountsservice (CVSS 7.8) - [CVE-2021-3493](https://cve.now/CVE-2021-3493.md): The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities (CVSS 8.8, KEV) - [CVE-2021-3492](https://cve.now/CVE-2021-3492.md): Ubuntu linux kernel shiftfs file system double free vulnerability (CVSS 8.8) - [CVE-2020-27347](https://cve.now/CVE-2020-27347.md): tmux stack buffer overflow in function input\_csi\_dispatch\_sgr\_colon (CVSS 8.8) - [CVE-2020-15708](https://cve.now/CVE-2020-15708.md): Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability (CVSS 9.3) - [CVE-2020-15707](https://cve.now/CVE-2020-15707.md): GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. (CVSS 5.7) - [CVE-2020-15706](https://cve.now/CVE-2020-15706.md): GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. (CVSS 6.4) - [CVE-2020-15705](https://cve.now/CVE-2020-15705.md): GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim (CVSS 6.4) - [CVE-2014-1423](https://cve.now/CVE-2014-1423.md): Online Accounts Signon daemon gives out all oauth tokens to any app (CVSS 5.9) - [CVE-2019-15794](https://cve.now/CVE-2019-15794.md): Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs (CVSS 7.1) - [CVE-2019-15793](https://cve.now/CVE-2019-15793.md): Mishandling of file-system uid/gid with namespaces in shiftfs (CVSS 6.5) - [CVE-2019-15792](https://cve.now/CVE-2019-15792.md): Type confusion in shiftfs (CVSS 7.1) - [CVE-2019-15791](https://cve.now/CVE-2019-15791.md): Reference count underflow in shiftfs (CVSS 7.1) - [CVE-2020-8832](https://cve.now/CVE-2020-8832.md): Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 (CVSS 5.5) - [CVE-2012-2092](https://cve.now/CVE-2012-2092.md): A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the (no CVSS) - [CVE-2019-7307](https://cve.now/CVE-2019-7307.md): Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml (CVSS 6.5) - [CVE-2019-11476](https://cve.now/CVE-2019-11476.md): Integer overflow in whoopsie results in out-of-bounds heap write (CVSS 6.5) - [CVE-2016-1587](https://cve.now/CVE-2016-1587.md): The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the (CVSS 7.1) - [CVE-2016-1586](https://cve.now/CVE-2016-1586.md): A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versi (CVSS 1.8) - [CVE-2016-1584](https://cve.now/CVE-2016-1584.md): Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most (CVSS 1.6) - [CVE-2016-1579](https://cve.now/CVE-2016-1579.md): UDM doesn't check for confinement before running post-processing commands (CVSS 6.7) - [CVE-2016-1573](https://cve.now/CVE-2016-1573.md): Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash (CVSS 4.8) - [CVE-2015-1343](https://cve.now/CVE-2015-1343.md): unity-scope-gdrive search feature logs search terms to syslog (CVSS 2.0) - [CVE-2015-1341](https://cve.now/CVE-2015-1341.md): Apport privilege escalation through Python module imports (CVSS 7.4) - [CVE-2015-1340](https://cve.now/CVE-2015-1340.md): chmod race in doUidshiftIntoContainer (CVSS 7.0) - [CVE-2015-1327](https://cve.now/CVE-2015-1327.md): Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access (CVSS 3.9) - [CVE-2015-1326](https://cve.now/CVE-2015-1326.md): python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp (CVSS 5.7) - [CVE-2015-1320](https://cve.now/CVE-2015-1320.md): Probe-and-enlist for SeaMicro chassis writes password to the log (CVSS 5.5) - [CVE-2015-1316](https://cve.now/CVE-2015-1316.md): Juju Joyent provider uploads user's private ssh key by default (CVSS 6.4) - [CVE-2014-1428](https://cve.now/CVE-2014-1428.md): uuid.uuid1() is not suitable as an unguessable identifier/token (CVSS 2.0) - [CVE-2014-1427](https://cve.now/CVE-2014-1427.md): MAAS API vulnerable to CSRF attack (CVSS 9.6) - [CVE-2014-1426](https://cve.now/CVE-2014-1426.md): get\_file\_by\_name does not check owner (CVSS 8.6) - [CVE-2018-6557](https://cve.now/CVE-2018-6557.md): Insecure temporary file use in base-files (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/ubuntu Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.