InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,469
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product canonical:ubuntu_linux. Show all products

206 CVEs, showing 151 to 200PreviousPage 4 of 5Next
CVESeverityTitlePublished
CVE-2020-11651
Known exploited
Critical 9.8An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
Assigned by mitre
Apr 30, 2020
CVE-2020-11652
Known exploited
Medium 6.5An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
Assigned by mitre
Apr 30, 2020
CVE-2020-12762High 7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Assigned by mitre
May 9, 2020
CVE-2019-20795Medium 4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.
Assigned by mitre
May 9, 2020
CVE-2020-12769Medium 5.5An issue was discovered in the Linux kernel before 5.4.17.
Assigned by mitre
May 9, 2020
CVE-2020-9484High 7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server;…
Assigned by apache
May 20, 2020
CVE-2020-13434Medium 5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Assigned by mitre
May 24, 2020
CVE-2020-13632Medium 5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Assigned by mitre
May 27, 2020
CVE-2020-13631Medium 5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
Assigned by mitre
May 27, 2020
CVE-2020-13630High 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Assigned by mitre
May 27, 2020
CVE-2020-13777High 7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).
Assigned by mitre
Jun 4, 2020
CVE-2020-11996High 7.5A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds.
Assigned by apache
Jun 26, 2020
CVE-2020-15358Medium 5.5In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
Assigned by mitre
Jun 27, 2020
CVE-2019-20907Medium 5.5In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
Assigned by mitre
Jul 13, 2020
CVE-2020-13934High 7.5An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2.
Assigned by apache
Jul 14, 2020
CVE-2020-13935High 7.5The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104.
Assigned by apache
Jul 14, 2020
CVE-2020-1472
Known exploited
Medium 5.5Netlogon Elevation of Privilege Vulnerability
Assigned by microsoft
Aug 17, 2020
CVE-2020-24659High 7.5An issue was discovered in GnuTLS before 3.6.15.
Assigned by mitre
Sep 4, 2020
CVE-2020-26116High 7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by ins…
Assigned by mitre
Sep 27, 2020
CVE-2020-27170Medium 4.7An issue was discovered in the Linux kernel before 5.11.8.
Assigned by mitre
Mar 20, 2021
CVE-2020-27171Medium 6.0An issue was discovered in the Linux kernel before 5.11.8.
Assigned by mitre
Mar 20, 2021
CVE-2021-3493
Known exploited
High 8.8The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system.
Assigned by canonical
Apr 17, 2021
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2021-3560
Known exploited
High 7.8It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.
Assigned by redhat
Feb 16, 2022
CVE-2022-0492
Known exploited
High 7.8A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
Assigned by redhat
Mar 3, 2022
CVE-2021-3737High 7.5A flaw was found in python.
Assigned by redhat
Mar 4, 2022
CVE-2022-34918High 7.8An issue was discovered in the Linux kernel through 5.18.9.
Assigned by mitre
Jul 4, 2022
CVE-2022-1184Medium 5.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component.
Assigned by redhat
Aug 29, 2022
CVE-2022-41222High 7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
Assigned by mitre
Sep 21, 2022
CVE-2023-0386
Known exploited
High 7.8A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl…
Assigned by redhat
Mar 22, 2023
CVE-2023-3389High 7.8Use after free in io_uring in the Linux Kernel
Assigned by Google
Jun 28, 2023
CVE-2023-40283High 7.8An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.
Assigned by mitre
Aug 14, 2023
CVE-2023-3777High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Sep 6, 2023
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-45866Medium 6.3Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting inject…Dec 8, 2023
CVE-2022-2586
Known exploited
Medium 5.3It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Assigned by canonical
Jan 8, 2024
CVE-2022-2588Medium 5.3It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
Assigned by canonical
Jan 8, 2024
CVE-2022-2602Medium 5.3io_uring UAF, Unix SCM garbage collection
Assigned by canonical
Jan 8, 2024
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2025-26466Medium 5.9Openssh: denial-of-service in openssh
Assigned by redhat
Feb 28, 2025
CVE-2025-32463
Known exploited
Critical 9.3Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Assigned by mitre
Jun 30, 2025
CVE-2026-3497Low 2.7Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
Assigned by canonical
Mar 12, 2026
CVE-2026-3888High 7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up th…Mar 17, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-47326Medium 5.5Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications.May 28, 2026
CVE-2026-47327Low 3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications.May 28, 2026
CVE-2026-47328Medium 6.1Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory.May 28, 2026
CVE-2026-47329Low 3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses.May 28, 2026
CVE-2026-47330Low 3.3Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code.May 28, 2026
CVE-2026-47331High 7.8Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list.May 28, 2026
PreviousPage 4 of 5Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.