Login Request a demo
CA
Vendor
Canonical
72 products with CVEs on record
4,355
CVEs
47
On KEV
12
New 30D
Products
UL
Ubuntu Linux
Canonical
10.0
4,112 CVEs47 on KEV0 new
LX
lxd
Canonical
9.9
42 CVEs0 on KEV7 new
JU
Juju
Canonical
10.0
20 CVEs0 on KEV1 new
AU
authd
Canonical
8.8
5 CVEs0 on KEV1 new
MA
MAAS
Canonical
6.5
4 CVEs0 on KEV1 new
PO
postgresql-operator
Canonical
5.3
1 CVEs0 on KEV1 new
UP
Ubuntu Pro for WSL
Canonical
5.7
1 CVEs0 on KEV1 new
AP
Apport
Canonical
7.8
18 CVEs0 on KEV0 new
SN
Snapd
Canonical
10.0
16 CVEs0 on KEV0 new
CL
cloud-init
Canonical
8.8
9 CVEs0 on KEV0 new
U2
Ubuntu 22.04 LTS
Canonical
9.0
7 CVEs0 on KEV0 new
U2
Ubuntu 24.04 LTS
Canonical
9.0
7 CVEs0 on KEV0 new
AC
accountsservice
Canonical
7.8
6 CVEs0 on KEV0 new
U2
Ubuntu 26.04 LTS
Canonical
9.0
6 CVEs0 on KEV0 new
MA
Metal AS A Service
Canonical
9.8
5 CVEs0 on KEV0 new
MU
Multipass
Canonical
8.8
5 CVEs0 on KEV0 new
UB
Ubuntu
Canonical
9.1
5 CVEs0 on KEV0 new
U1
Ubuntu 16.04 LTS
Canonical
9.0
5 CVEs0 on KEV0 new
U1
Ubuntu 18.04 LTS
Canonical
9.0
5 CVEs0 on KEV0 new
U2
Ubuntu 20.04 LTS
Canonical
9.0
5 CVEs0 on KEV0 new
UC
Ubuntu Core
Canonical
7.8
4 CVEs0 on KEV0 new
UT
Ubuntu Touch
Canonical
7.8
4 CVEs0 on KEV0 new
LA
Landscape
Canonical
8.2
3 CVEs0 on KEV0 new
SU
Subiquity
Canonical
8.4
3 CVEs0 on KEV0 new
UU
ubuntu-pro-client (ubuntu-advantage-tools)
Canonical
9.0
3 CVEs0 on KEV0 new
AC
Acpi-support
Canonical
–
2 CVEs0 on KEV0 new
LX
Lxcfs
Canonical
–
2 CVEs0 on KEV0 new
SO
Software-properties
Canonical
7.4
2 CVEs0 on KEV0 new
U1
Ubuntu 14.04 LTS
Canonical
9.0
2 CVEs0 on KEV0 new
UD
Ubuntu Desktop Provision
Canonical
9.1
2 CVEs0 on KEV0 new
UN
Unity-firefox-extension
Canonical
6.5
2 CVEs0 on KEV0 new
UP
Update-manager
Canonical
–
2 CVEs0 on KEV0 new
AD
Add-apt-repository
Canonical
5.5
1 CVEs0 on KEV0 new
AC
Anbox Cloud
Canonical
7.5
1 CVEs0 on KEV0 new
AP
Apparmor
Canonical
9.8
1 CVEs0 on KEV0 new
AP
Apt-xapian-index
Canonical
–
1 CVEs0 on KEV0 new
BA
Bazaar
Canonical
8.8
1 CVEs0 on KEV0 new
CK
C-kernel
Canonical
8.1
1 CVEs0 on KEV0 new
CA
canonical-livepatch
Canonical
5.5
1 CVEs0 on KEV0 new
CH
Checkinstall
Canonical
7.8
1 CVEs0 on KEV0 new
JU
Juju/utils
Canonical
6.5
1 CVEs0 on KEV0 new
LI
Libpam-modules
Canonical
–
1 CVEs0 on KEV0 new
LI
Linux-bluefield
Canonical
7.5
1 CVEs0 on KEV0 new
LC
Livepatch Client
Canonical
5.5
1 CVEs0 on KEV0 new
LD
Ltsp Display Manager
Canonical
–
1 CVEs0 on KEV0 new
MI
Microceph
Canonical
5.1
1 CVEs0 on KEV0 new
MI
Microk8s
Canonical
7.8
1 CVEs0 on KEV0 new
NE
Netplan
Canonical
6.5
1 CVEs0 on KEV0 new
OI
Openstack Ironic
Canonical
7.5
1 CVEs0 on KEV0 new
PD
Pdfunite
Canonical
5.5
1 CVEs0 on KEV0 new
PE
Pebble
Canonical
6.5
1 CVEs0 on KEV0 new
PH
Php5
Canonical
–
1 CVEs0 on KEV0 new
PP
Ppp
Canonical
5.5
1 CVEs0 on KEV0 new
RE
Remote-login-service
Canonical
5.5
1 CVEs0 on KEV0 new
RE
Reportbug
Canonical
–
1 CVEs0 on KEV0 new
SC
Screen-resolution-extra
Canonical
7.0
1 CVEs0 on KEV0 new
SE
Selinux
Canonical
5.9
1 CVEs0 on KEV0 new
SN
Snapcraft
Canonical
6.8
1 CVEs0 on KEV0 new
SP
Spread
Canonical
–
1 CVEs0 on KEV0 new
TE
Telepathy-idle
Canonical
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-93336
New
JU
Juju
Canonical
7.1
0%
Oct 22Missing authorization in the unit resources download route in Juju controllers
CVE-2026-102631
AU
authd
Canonical
5.9
0%
Oct 15authd: Account takeover via username fallback in identity matching after IdP email reassignment
CVE-2026-104055
PO
postgresql-operator
Canonical
5.3
0%
Oct 2Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
CVE-2026-12392
MA
MAAS
Canonical
5.3
0%
Oct 2RPC secret disclosure via vendor data endpoint in Canonical MAAS
CVE-2026-102371
UP
Ubuntu Pro for WSL
Canonical
5.7
0%
Sep 29wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments
CVE-2026-87798
LX
LXD
Canonical
5.8
0%
Sep 28LXD client recursive file pull allows directory escape via malicious VM agent
CVE-2026-87799
LX
LXD
Canonical
9.9
0%
Sep 28Arbitrary file write on LXD host via symlink in migration stream
CVE-2026-97335
LX
LXD
Canonical
7.7
0%
Sep 28Incorrect authorization in LXD storage volume API allows reading volumes from other projects
CVE-2026-85185
LX
LXD
Canonical
9.6
0%
Sep 28Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
CVE-2026-85526
LX
LXD
Canonical
9.9
1%
Sep 28Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
CVE-2026-86335
LX
LXD
Canonical
6.3
0%
Sep 28LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse
CVE-2026-86334
LX
LXD
Canonical
4.2
0%
Sep 28CLI Path Traversal via Content-Disposition in LXD Image Export/Copy
CVE-2026-66897
LX
LXD
Canonical
9.9
1%
Aug 24Instance template path traversal allows arbitrary host file write as root
CVE-2026-77113
AP
Apport
Canonical
6.7
0%
Aug 20Path Traversal Vulnerability in apport-unpack
CVE-2026-61898
AC
accountsservice
Canonical
7.8
0%
Aug 20accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts
CVE-2026-61897
AC
accountsservice
Canonical
7.8
0%
Aug 20accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
CVE-2026-16033
LX
LXD
Canonical
8.5
0%
Aug 12Arbitrary file read+write on host via templates/ symlink in malicious image
CVE-2026-66898
LX
LXD
Canonical
9.9
1%
Aug 12Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE
CVE-2026-63293
LX
LXD
Canonical
9.9
1%
Aug 12Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
CVE-2026-63294
LX
LXD
Canonical
9.9
1%
Aug 12Root RCE via image backup.yaml symlink
CVE-2026-63295
LX
LXD
Canonical
4.3
0%
Aug 12Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
CVE-2026-63296
LX
LXD
Canonical
9.9
0%
Aug 12Project restriction bypass via instance migration config override
CVE-2026-63297
LX
LXD
Canonical
9.9
0%
Aug 12Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CVE-2026-63298
LX
LXD
Canonical
9.9
1%
Aug 12LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration
CVE-2026-63299
LX
LXD
Canonical
9.9
1%
Aug 12Storage volume cross-project move and snapshot restore bypass project disk limits
CVE-2026-62420
LX
LXD
Canonical
9.9
1%
Aug 12Cross-project cluster migration bypasses project restrictions via cluster notification flag
CVE-2026-63300
LX
LXD
Canonical
9.9
1%
Aug 12Cross-project instance move bypasses all project restrictions allowing host command execution
CVE-2026-8933
U2
Ubuntu 26.04 LTS
Canonical
7.8
0%
Jul 21snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup
CVE-2026-15226
U1
Ubuntu 16.04 LTS
Canonical
8.4
0%
Jul 21snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates
CVE-2024-5300
U2
Ubuntu 20.04 LTS
Canonical
5.6
0%
Jul 21AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd
CVE-2026-12391
UU
ubuntu-pro-client (ubuntu-advantage-tools)
Canonical
5.0
0%
Jul 16ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs
CVE-2026-11386
U1
Ubuntu 16.04 LTS
Canonical
9.0
1%
Jul 16ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution
CVE-2026-9494
U2
Ubuntu 22.04 LTS
Canonical
5.5
0%
Jul 16ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line
CVE-2026-10037
UB
Ubuntu
Canonical
8.8
0%
Jul 8Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal
CVE-2026-28385
LX
lxd
Canonical
5.0
0%
Jun 26SSRF via image import from URL allows internal network probing by authenticated users
CVE-2026-9640
LX
LXD
Canonical
7.2
1%
Jun 26LXD Snapshot Import Privilege Escalation Vulnerability
CVE-2026-9639
LX
LXD
Canonical
6.5
1%
Jun 26Authenticated Denial of Service via Malicious Backup Tarball in LXD
CVE-2026-12411
LX
lxd
Canonical
9.6
0%
Jun 26Broken Access Control in Canonical LXD DevLXD API
CVE-2026-12249
U2
Ubuntu 22.04 LTS
Canonical
9.0
0%
Jun 22Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment
CVE-2026-10720
MI
Microceph
Canonical
5.1
0%
Jun 19MicroCeph path traversal issue in the remote-import API
CVE-2026-47337
UL
Ubuntu Linux
Canonical
3.3
0%
May 28NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation
CVE-2026-47336
UL
Ubuntu Linux
Canonical
3.3
0%
May 28Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules
CVE-2026-47335
UL
Ubuntu Linux
Canonical
5.5
0%
May 28NULL pointer dereference in Ubuntu Linux AppArmor notification handling
CVE-2026-47334
UL
Ubuntu Linux
Canonical
5.5
0%
May 28Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
CVE-2026-47333
UL
Ubuntu Linux
Canonical
7.8
0%
May 28Out-of-bounds read in Ubuntu Linux AppArmor notification handling
CVE-2026-47332
UL
Ubuntu Linux
Canonical
5.5
0%
May 28Out-of-bounds read in Ubuntu Linux AppArmor notification handling
CVE-2026-47331
UL
Ubuntu Linux
Canonical
7.8
0%
May 28Use-after-free in Ubuntu Linux AppArmor notification handling
CVE-2026-47330
UL
Ubuntu Linux
Canonical
3.3
0%
May 28Use of uninitialized value in Ubuntu Linux AppArmor notification handling
CVE-2026-47329
UL
Ubuntu Linux
Canonical
3.3
0%
May 28Incorrect validation of field size in Ubuntu Linux AppArmor notification responses
CVE-2026-47328
UL
Ubuntu Linux
Canonical
6.1
0%
May 28Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
CVE-2026-47327
UL
Ubuntu Linux
Canonical
3.3
0%
May 28NULL pointer dereference in Ubuntu Linux AppArmor notification handling
CVE-2026-47326
UL
Ubuntu Linux
Canonical
5.5
0%
May 28Memory leak in Ubuntu Linux AppArmor large notification response allocation
CVE-2026-49237
MU
Multipass
Canonical
7.8
0%
May 28Local Privilege Escalation in Canonical Multipass
CVE-2026-49238
MU
Multipass
Canonical
8.4
1%
May 28SFTP Server VM Escape in Canonical Multipass
CVE-2018-25306
PD
Pdfunite
Canonical
5.5
0%
Apr 29PDFunite 0.41.0 Buffer Overflow via Malformed PDF
CVE-2026-6970
AU
authd
Canonical
7.3
0%
Apr 27authd Denial of Service and Local Privilege Escalation
CVE-2026-31431
In wildKEV
UL
Ubuntu Linux
Canonical
7.8
98%
Apr 22crypto: algif_aead - Revert to operating out-of-place
CVE-2026-6369
CA
canonical-livepatch
Canonical
5.5
0%
Apr 20Exposed Session Token in canonical-livepatch client snap
CVE-2026-5412
JU
Juju
Canonical
6.5
0%
Apr 10Juju CloudSpec API could leak senstive information
CVE-2026-5774
JU
Juju
Canonical
6.4
0%
Apr 10Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map