canonical

Top products

The 15 most recently published vulnerabilities affecting canonical.

• CVE-2026-8933snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup7.8Jul 21, 2026
• CVE-2026-15226snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates8.4Jul 21, 2026
• CVE-2024-5300AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd5.6Jul 21, 2026
• CVE-2026-12391ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs5.0Jul 16, 2026
• CVE-2026-11386ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution9.0Jul 16, 2026
• CVE-2026-9494ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line5.5Jul 16, 2026
• CVE-2026-10037Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal8.8Jul 8, 2026
• CVE-2026-28385SSRF via image import from URL allows internal network probing by authenticated users5.0Jun 26, 2026
• CVE-2026-9640LXD Snapshot Import Privilege Escalation Vulnerability7.2Jun 26, 2026
• CVE-2026-9639Authenticated Denial of Service via Malicious Backup Tarball in LXD6.5Jun 26, 2026
• CVE-2026-12411Broken Access Control in Canonical LXD DevLXD API8.4Jun 26, 2026
• CVE-2026-12249Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment9.0Jun 22, 2026
• CVE-2026-47337NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation3.3May 28, 2026
• CVE-2026-47336Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules3.3May 28, 2026
• CVE-2026-47335NULL pointer dereference in Ubuntu Linux AppArmor notification handling5.5May 28, 2026