Ubuntu

This hub aggregates every CVE we track for Ubuntu, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Ubuntu.

• CVE-2026-12249Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment9.0Jun 22, 2026
• CVE-2026-35058Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and ...7.7Jun 8, 2026
• CVE-2026-3238Samba: denial of service against ad dc wins server7.5Jun 8, 2026
• CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions7.1Jun 1, 2026
• CVE-2026-47337NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation3.3May 28, 2026
• CVE-2026-47336Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules3.3May 28, 2026
• CVE-2026-47335NULL pointer dereference in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47334Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47333Out-of-bounds read in Ubuntu Linux AppArmor notification handling7.8May 28, 2026
• CVE-2026-47332Out-of-bounds read in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47331Use-after-free in Ubuntu Linux AppArmor notification handling7.8May 28, 2026
• CVE-2026-47330Use of uninitialized value in Ubuntu Linux AppArmor notification handling3.3May 28, 2026
• CVE-2026-47329Incorrect validation of field size in Ubuntu Linux AppArmor notification responses3.3May 28, 2026
• CVE-2026-47328Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling6.1May 28, 2026
• CVE-2026-47327NULL pointer dereference in Ubuntu Linux AppArmor notification handling3.3May 28, 2026