What’s Vulnerable › Products
Canonical Ubuntu Linux vulnerabilities
4122 known vulnerabilities, 47 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.
Check whether your Canonical Ubuntu Linux version is affected
Exploited Canonical Ubuntu Linux vulnerabilities
- CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
- CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
- CVE-2023-0386 — Linux Kernel Improper Ownership Management Vulnerability
- CVE-2016-3714 — ImageMagick Improper Input Validation Vulnerability
- CVE-2022-2586 — Linux Kernel Use-After-Free Vulnerability
- CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability
- CVE-2021-3560 — Red Hat Polkit Incorrect Authorization Vulnerability
- CVE-2016-8735 — Apache Tomcat Remote Code Execution Vulnerability
- CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
- CVE-2014-0196 — Linux Kernel Race Condition Vulnerability
- CVE-2010-3904 — Linux Kernel Improper Input Validation Vulnerability
- CVE-2021-3493 — Linux Kernel Privilege Escalation Vulnerability
- CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2016-1646 — Google Chromium V8 Out-of-Bounds Read Vulnerability
- CVE-2015-4495 — Mozilla Firefox Security Feature Bypass Vulnerability
- CVE-2014-3153 — Linux Kernel Privilege Escalation Vulnerability
- CVE-2013-2423 — Oracle JRE Unspecified Vulnerability
- CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability
- CVE-2010-0840 — Oracle JRE Unspecified Vulnerability
- CVE-2014-0160 — OpenSSL Information Disclosure Vulnerability
- CVE-2013-1690 — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
- CVE-2020-7247 — OpenSMTPD Remote Code Execution Vulnerability
Latest Canonical Ubuntu Linux vulnerabilities
- CVE-2026-47337 — NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation (CVSS 3.3)
- CVE-2026-47336 — Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules (CVSS 3.3)
- CVE-2026-47335 — NULL pointer dereference in Ubuntu Linux AppArmor notification handling (CVSS 5.5)
- CVE-2026-47334 — Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling (CVSS 5.5)
- CVE-2026-47333 — Out-of-bounds read in Ubuntu Linux AppArmor notification handling (CVSS 7.8)
- CVE-2026-47332 — Out-of-bounds read in Ubuntu Linux AppArmor notification handling (CVSS 5.5)
- CVE-2026-47331 — Use-after-free in Ubuntu Linux AppArmor notification handling (CVSS 7.8)
- CVE-2026-47330 — Use of uninitialized value in Ubuntu Linux AppArmor notification handling (CVSS 3.3)
- CVE-2026-47329 — Incorrect validation of field size in Ubuntu Linux AppArmor notification responses (CVSS 3.3)
- CVE-2026-47328 — Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling (CVSS 6.1)
- CVE-2026-47327 — NULL pointer dereference in Ubuntu Linux AppArmor notification handling (CVSS 3.3)
- CVE-2026-47326 — Memory leak in Ubuntu Linux AppArmor large notification response allocation (CVSS 5.5)
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (CVSS 7.8) — exploited
- CVE-2026-3888 — Local Privilege Escalation in snapd (CVSS 7.8)
- CVE-2026-3497 — (CVSS 7.5)
- CVE-2025-13350 — Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel (CVSS 7.1)
- CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVSS 7.8) — exploited
- CVE-2025-5054 — Race Condition in Canonical Apport (CVSS 4.7)
- CVE-2023-5616 — (CVSS 4.9)
- CVE-2022-1804 — Accountsservice incorrectly drops privileges (CVSS 5.5)
- CVE-2025-26466 — Openssh: denial-of-service in openssh (CVSS 5.9)
- CVE-2022-1736 — (CVSS 9.8)
- CVE-2024-6387 — Openssh: regresshion - race condition in ssh allows rce/dos (CVSS 8.1)
- CVE-2020-27352 — (CVSS 8.8)
- CVE-2022-28658 — (CVSS 5.5)