Canonical - vulnerabilities (CVEs)
4291 CVEs in 95 products, 12 in the last 30 days, newest from 2026-10-22.
Products
- Ubuntu Linux - 4121 CVEs
- Lxd - 36 CVEs
- Apport - 27 CVEs
- Juju - 19 CVEs
- Snapd - 16 CVEs
- Cloud-init - 9 CVEs
- Ubuntu 22.04 Lts - 8 CVEs
- Ubuntu 24.04 Lts - 8 CVEs
- Ubuntu 20.04 Lts - 7 CVEs
- Ubuntu 26.04 Lts - 7 CVEs
- Ubuntu 16.04 Lts - 6 CVEs
- Ubuntu 18.04 Lts - 6 CVEs
- Metal As A Service - 5 CVEs
- Multipass - 5 CVEs
- Accountsservice - 4 CVEs
- Maas - 4 CVEs
- Python-apt - 4 CVEs
- Ubuntu Core - 4 CVEs
- Ubuntu Touch - 4 CVEs
- Aptdaemon - 3 CVEs
- Authd - 3 CVEs
- Landscape - 3 CVEs
- Pulseaudio - 3 CVEs
- Subiquity - 3 CVEs
- Ubuntu - 3 CVEs
- Ubuntu-pro-client Ubuntu-advantage-tools - 3 CVEs
- Acpi-support - 2 CVEs
- Lxcfs - 2 CVEs
- Software-properties - 2 CVEs
- Ubantu Kernel - 2 CVEs
- Ubuntu 14.04 Lts - 2 CVEs
- Ubuntu Desktop Provision - 2 CVEs
- Ubuntu Kernel - 2 CVEs
- Unity-firefox-extension - 2 CVEs
- Update-manager - 2 CVEs
- Whoopsie - 2 CVEs
- Add-apt-repository - 1 CVEs
- Anbox Cloud - 1 CVEs
- Apparmor - 1 CVEs
- Apt - 1 CVEs
- Apt-xapian-index - 1 CVEs
- Bazaar - 1 CVEs
- Byobu - 1 CVEs
- C-kernel - 1 CVEs
- Canonical-livepatch - 1 CVEs
- Checkinstall - 1 CVEs
- Core - 1 CVEs
- Extplorer - 1 CVEs
- Get-workflow-version-action - 1 CVEs
- Juju/utils - 1 CVEs
- Juju Utils - 1 CVEs
- Libpam-modules - 1 CVEs
- Libunity-webapps - 1 CVEs
- Linux-bluefield - 1 CVEs
- Linux Kernel - 1 CVEs
- Livepatch Client - 1 CVEs
- Ltsp Display Manager - 1 CVEs
- Microceph - 1 CVEs
- Microk8s - 1 CVEs
- Mysql-k8s-operator - 1 CVEs
- Netplan - 1 CVEs
- Openstack Ironic - 1 CVEs
- Operator - 1 CVEs
- Pc-kernel - 1 CVEs
- Pdfunite - 1 CVEs
- Pebble - 1 CVEs
- Php5 - 1 CVEs
- Postgresql-operator - 1 CVEs
- Ppp - 1 CVEs
- Remote-login-service - 1 CVEs
- Reportbug - 1 CVEs
- Screen-resolution-extra - 1 CVEs
- Selinux - 1 CVEs
- Snap - 1 CVEs
- Snapcraft - 1 CVEs
- Spread - 1 CVEs
- Telepathy-idle - 1 CVEs
- Trust-store (ubuntu) - 1 CVEs
- Trust-store (ubuntu Rtm) - 1 CVEs
- Trust-store Ubuntu - 1 CVEs
- Trust-store Ubuntu Rtm - 1 CVEs
- Ubuntu-core-launcher - 1 CVEs
- Ubuntu-image - 1 CVEs
- Ubuntu-ui-toolkit - 1 CVEs
- Ubuntu 25.10 - 1 CVEs
- Ubuntu Advantage Desktop Daemon - 1 CVEs
- Ubuntu Advantage Desktop Pro - 1 CVEs
- Ubuntu Cobbler - 1 CVEs
- Ubuntu Download Manager - 1 CVEs
- Ubuntu Pipewire-pulse - 1 CVEs
- Ubuntu Pro For Wsl - 1 CVEs
- Ubuntu Server - 1 CVEs
- Ubuntu Software Properties - 1 CVEs
- Ubuntu Subiquity - 1 CVEs
- Unity8 Ubuntu - 1 CVEs
Newest CVEs of Canonical
- CVE-2026-93336 - CVSS 7.1 (high), 2026-10-22: Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or…
- CVE-2026-102631 - CVSS 5.9 (medium), 2026-10-15: In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but…
- CVE-2026-104055 - CVSS 5.3 (medium), 2026-10-02: The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database…
- CVE-2026-12392 - CVSS 5.3 (medium), 2026-10-02: An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to…
- CVE-2026-102371 - CVSS 5.7 (medium), 2026-09-29: In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing…
- CVE-2026-87798 - CVSS 5.8 (medium), 2026-09-28: Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and…
- CVE-2026-87799 - CVSS 9.9 (critical), 2026-09-28: Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an…
- CVE-2026-97335 - CVSS 7.7 (high), 2026-09-28: Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux…
- CVE-2026-85185 - CVSS 9.6 (critical), 2026-09-28: Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an…
- CVE-2026-85526 - CVSS 9.9 (critical), 2026-09-28: Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete…
- CVE-2026-86335 - CVSS 6.3 (medium), 2026-09-28: Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images…
- CVE-2026-86334 - CVSS 4.2 (medium), 2026-09-28: Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms…
- CVE-2026-66897 - CVSS 9.9 (critical), 2026-08-24: A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted…
- CVE-2026-77113 - CVSS 6.7 (medium), 2026-08-20: Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with…
- CVE-2026-61898 - CVSS 7.8 (high), 2026-08-20: The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled…
- CVE-2026-61897 - CVSS 7.8 (high), 2026-08-20: An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the…
- CVE-2026-16033 - CVSS 8.5 (high), 2026-08-12: A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata…
- CVE-2026-66898 - CVSS 9.9 (critical), 2026-08-12: A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or…
- CVE-2026-63293 - CVSS 9.9 (critical), 2026-08-12: A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking…
- CVE-2026-63294 - CVSS 9.9 (critical), 2026-08-12: A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image…
- CVE-2026-63295 - CVSS 4.3 (medium), 2026-08-12: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is…
- CVE-2026-63296 - CVSS 9.9 (critical), 2026-08-12: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating…
- CVE-2026-63297 - CVSS 9.9 (critical), 2026-08-12: An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project…
- CVE-2026-63298 - CVSS 9.9 (critical), 2026-08-12: An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject…
- CVE-2026-63299 - CVSS 9.9 (critical), 2026-08-12: An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to…
- CVE-2026-62420 - CVSS 9.9 (critical), 2026-08-12: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance…
- CVE-2026-63300 - CVSS 9.9 (critical), 2026-08-12: An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with…
- CVE-2026-8933 - CVSS 7.8 (high), 2026-07-21: A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the…
- CVE-2026-15226 - CVSS 8.4 (high), 2026-07-21: A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp…
- CVE-2024-5300 - CVSS 5.6 (medium), 2026-07-21: An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The…
