Canonical
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LXD | 45 | – | Oct 30, 2026 |
| Apport | 23 | – | Aug 20, 2026 |
| Ubuntu Linux | 13 | – | May 28, 2026 |
| Juju | 12 | – | Oct 22, 2026 |
| Ubuntu 24.04 LTS | 8 | – | Jul 21, 2026 |
| Ubuntu 22.04 LTS | 8 | – | Jul 21, 2026 |
| Ubuntu 20.04 LTS | 7 | – | Jul 21, 2026 |
| Ubuntu 26.04 LTS | 7 | – | Jul 21, 2026 |
| Ubuntu 16.04 LTS | 6 | – | Jul 21, 2026 |
| Ubuntu 18.04 LTS | 6 | – | Jul 21, 2026 |
| Multipass | 5 | – | May 28, 2026 |
| snapd | 4 | – | Jul 25, 2024 |
| authd | 3 | – | Oct 15, 2026 |
| aptdaemon | 3 | – | Dec 9, 2020 |
| PulseAudio | 3 | – | Dec 3, 2020 |
| Ubuntu | 3 | – | Jul 8, 2026 |
| ubuntu-pro-client (ubuntu-advantage-tools) | 3 | – | Jul 16, 2026 |
| Ubuntu Kernel | 2 | – | Jul 26, 2023 |
| python-apt | 2 | – | Dec 5, 2025 |
| accountsservice | 2 | – | Aug 20, 2026 |
| MAAS | 2 | – | Oct 2, 2026 |
| Ubuntu 14.04 LTS | 2 | – | Jul 16, 2026 |
| cloud-init | 2 | – | Jun 26, 2025 |
| snapcraft | 1 | – | Dec 4, 2020 |
| Juju utils | 1 | – | Jul 1, 2025 |
| Subiquity | 1 | – | May 13, 2020 |
| Ubuntu Server | 1 | – | Dec 12, 2023 |
| get-workflow-version-action | 1 | – | Apr 2, 2025 |
| core | 1 | – | Jul 29, 2020 |
| canonical-livepatch | 1 | – | Apr 20, 2026 |
| Ubuntu 25.10 | 1 | – | Jun 22, 2026 |
| apt | 1 | – | Dec 10, 2020 |
| add-apt-repository | 1 | – | Sep 5, 2020 |
| whoopsie | 1 | – | Aug 6, 2020 |
| Microceph | 1 | – | Jun 19, 2026 |
| mysql-k8s-operator | 1 | – | Apr 9, 2025 |
| Linux kernel | 1 | – | Jan 14, 2021 |
| operator | 1 | – | Jul 22, 2024 |
| postgresql-operator | 1 | – | Oct 2, 2026 |
| ppp | 1 | – | Aug 31, 2020 |
| Ubuntu Pro for WSL | 1 | – | Sep 29, 2026 |
| snap | 1 | – | Jul 25, 2024 |
Exploited and recent CVEs
- CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD 0.3%
- CVE-2026-93336 Missing authorization in the unit resources download route in Juju controllers 0.2%
- CVE-2026-102631 authd: Account takeover via username fallback in identity matching after IdP email reassignment 0.1%
- CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm 0.3%
- CVE-2026-12392 RPC secret disclosure via vendor data endpoint in Canonical MAAS 0.3%
- CVE-2026-102371 wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments 0.1%
- CVE-2026-87798 LXD client recursive file pull allows directory escape via malicious VM agent 0.2%
- CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream 0.4%
- CVE-2026-97335 Incorrect authorization in LXD storage volume API allows reading volumes from other projects 0.2%
- CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root 0.4%
- CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD 0.5%
- CVE-2026-86335 LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse 0.2%
- CVE-2026-86334 CLI Path Traversal via Content-Disposition in LXD Image Export/Copy 0.3%
- CVE-2026-66897 Instance template path traversal allows arbitrary host file write as root 0.7%
- CVE-2026-55622 Incus has a project restriction bypass in instance copy across projects 0.5%
- CVE-2026-55621 Incus has a project restriction bypass for custom volume copy across projects 0.4%
- CVE-2026-48769 Incus has an arbitrary file write on its client due to trusted image hash 0.8%
- CVE-2026-48755 Incus has an argument injection in backup compression algorithm leading to AFW and ACE 0.8%
- CVE-2026-48752 Incus has arbitrary file read+write on host via templates/ symlink in malicious image 0.8%
- CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution 0.7%
- CVE-2026-48750 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 0.8%
- CVE-2026-48749 Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 0.8%
- CVE-2026-77113 Path Traversal Vulnerability in apport-unpack 0.2%
- CVE-2026-61898 accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts 0.2%
- CVE-2026-61897 accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts 0.1%
- CVE-2026-16033 Arbitrary file read+write on host via templates/ symlink in malicious image 0.5%
- CVE-2026-66898 Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE 0.6%
- CVE-2026-63293 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 0.6%
- CVE-2026-63294 Root RCE via image backup.yaml symlink 0.9%
- CVE-2026-63295 Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 0.3%