Ubuntu

This hub aggregates every CVE we track for Ubuntu, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Ubuntu.

• CVE-2026-12391ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs5.0Jul 16, 2026
• CVE-2026-11386ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution9.0Jul 16, 2026
• CVE-2026-9494ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line5.5Jul 16, 2026
• CVE-2026-10037Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal8.8Jul 8, 2026
• CVE-2026-12249Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment9.0Jun 22, 2026
• CVE-2026-35058Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and ...7.7Jun 8, 2026
• CVE-2026-3238Samba: denial of service against ad dc wins server7.5Jun 8, 2026
• CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions7.1Jun 1, 2026
• CVE-2026-47337NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation3.3May 28, 2026
• CVE-2026-47336Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules3.3May 28, 2026
• CVE-2026-47335NULL pointer dereference in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47334Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47333Out-of-bounds read in Ubuntu Linux AppArmor notification handling7.8May 28, 2026
• CVE-2026-47332Out-of-bounds read in Ubuntu Linux AppArmor notification handling5.5May 28, 2026
• CVE-2026-47331Use-after-free in Ubuntu Linux AppArmor notification handling7.8May 28, 2026