canonical

4,248 tracked vulnerabilities.

CVE-2024-8287 HIGH
Anbox Management Service <1.23.0 - Info Disclosure
Sep 18, 2024
CVSS 7.5
EPSS 0.00
CVE-2024-6984 HIGH
Juju 2.9-2.9.49 - Sensitive Information Exposure via Context ID Leak
Jul 29, 2024
CVSS 8.8
EPSS 0.00
CVE-2024-29069 MEDIUM
snapd < 2.62 - Unauthenticated Arbitrary File Read via Malicious Snap Symbolic Links
Jul 25, 2024
CVSS 4.8
EPSS 0.00
CVE-2024-29068 MEDIUM
snapd < 2.62 - Denial of Service via Non-Regular File Extraction
Jul 25, 2024
CVSS 5.8
EPSS 0.00
CVE-2024-1724 MEDIUM
snapd < 2.62 - Unauthenticated Arbitrary Script Installation via Home Plug
Jul 25, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-6714 HIGH
Provd <0.1.5 - Privilege Escalation
Jul 23, 2024
CVSS 8.8
EPSS 0.00
CVE-2024-41129 MEDIUM
ops 2.0.0-2.14.9 - Sensitive Information Disclosure in Log Files via CLI Arguments
Jul 22, 2024
CVSS 4.4
EPSS 0.00
CVE-2024-6387 HIGH
OpenSSH - DoS
Jul 01, 2024
CVSS 8.1
EPSS 1.00
CVE-2024-6388 MEDIUM
Ubuntu Advantage Desktop Daemon <1.12 - Info Disclosure
Jun 27, 2024
CVSS 5.9
EPSS 0.00
CVE-2024-5138 HIGH
snapd 2.51.6-2.63.1 - Privilege Escalation via snapctl Command-Line Argument Parsing
May 31, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-3250 MEDIUM
Canonical Pebble < 1.4.2 - Unprivileged Local File Read via Read-File API
Apr 04, 2024
CVSS 6.5
EPSS 0.00
CVE-2023-5616 MEDIUM
gnome-control-center 1.3-1.3.36.5 - Authentication Bypass via SSH Remote Login Status Mismanagement
Apr 15, 2025
CVSS 4.9
EPSS 0.00
CVE-2023-0881 HIGH
Canonical Linux-Bluefield < 5.4.0-1058.64 - Denial of Service via TCP Port 22 DDoS
Mar 31, 2025
CVSS 7.5
EPSS 0.00
CVE-2023-0092 MEDIUM
juju 2.9.22-2.9.38 - Authenticated Path Traversal
Jan 31, 2025
CVSS 4.9
EPSS 0.01
CVE-2023-49721 MEDIUM
LXD 5.0.0-5.20.9 - Insecure Default UEFI Shell Permissions
Feb 14, 2024
CVSS 6.7
EPSS 0.00
CVE-2023-48733 MEDIUM
Canonical LXD - Insecure Default UEFI Shell Configuration
Feb 14, 2024
CVSS 6.7
EPSS 0.00
CVE-2023-1032 MEDIUM
Linux Kernel 5.19-6.3 - Double Free in io_uring IORING_OP_SOCKET Operation
Jan 08, 2024
CVSS 4.7
EPSS 0.00
CVE-2023-5536 MEDIUM
Ubuntu Linux < 24.04 - Privilege Escalation via LXD Group Default Configuration
Dec 12, 2023
CVSS 5.0
EPSS 0.00
CVE-2023-45866 MEDIUM
BlueZ Bluetooth HID Hosts - Unauthenticated Keyboard Input Injection
Dec 08, 2023
CVSS 6.3
EPSS 0.08
CVE-2023-5182 MEDIUM
Subiquity <23.09.1 - Info Disclosure
Oct 07, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-4911 HIGH KEVNUCLEI
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
Oct 03, 2023
CVSS 7.8
EPSS 0.81
CVE-2023-44216 MEDIUM
Canonical Ubuntu Linux - Information Disclosure
Sep 27, 2023
CVSS 5.3
EPSS 0.02
CVE-2023-3777 HIGH
Linux Kernel 5.9-5.10.188 - Use-After-Free in nf_tables Component
Sep 06, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-3297 HIGH
accountsservice < 23.13.9-2ubuntu2 - Use-After-Free via D-Bus Message
Sep 01, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-1523 CRITICAL
Canonical snapd <= 2.59.5 - TIOCLINUX Terminal Command Injection
Sep 01, 2023
CVSS 10.0
EPSS 0.01
Products
ubuntu_linux 4,120 lxd 23 juju 20 apport 17 snapd 16 Ubuntu Linux 13 cloud-init 9 Juju 7 metal_as_a_service 5 multipass 5 accountsservice 4 authd 4 ubuntu_core 4 ubuntu_touch 4 Ubuntu 3 landscape 3 maas 3 subiquity 3 LXD 2 Multipass 2 Ubuntu 20.04 LTS 2 Ubuntu 22.04 LTS 2 Ubuntu 24.04 LTS 2 acpi-support 2 lxcfs 2 software-properties 2 ubuntu 2 ubuntu_desktop_provision 2 unity-firefox-extension 2 update-manager 2
Quick Filters
Critical CVEs With Exploits In CISA KEV