Ubuntu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Linux kernel | 2 | 1 | Apr 17, 2021 |
| grub2 in Ubuntu | 3 | – | Jul 29, 2020 |
| APT | 1 | – | Nov 4, 2026 |
| edk2 | 1 | – | Nov 26, 2025 |
| libvirt | 1 | – | Nov 6, 2020 |
| Linux | 1 | – | Mar 25, 2025 |
| Linux kernel (aufs filesystem module) | 1 | – | Apr 7, 2023 |
| MAAS | 1 | – | Dec 3, 2025 |
| openssh | 1 | – | Mar 12, 2026 |
| tmux | 1 | – | Nov 6, 2020 |
| 18.04 LTS (bionic) Linux kernel | 1 | – | Apr 9, 2020 |
| Ubuntu package linux-bluefield | 1 | – | Mar 31, 2025 |
| accountsservice | 1 | – | Nov 17, 2021 |
Exploited and recent CVEs
- CVE-2021-3493 The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combinatio 49.2%
- CVE-2026-109518 APT RCE via hard link reuse 0.9%
- CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH up 2.3%
- CVE-2025-7044 Privilege Escalation in MAAS via Websocket Request Manipulation 0.3%
- CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu 0.1%
- CVE-2023-0881 DDoS in Ubuntu package linux-bluefield 0.4%
- CVE-2022-1804 Accountsservice incorrectly drops privileges 0.1%
- CVE-2020-11935 aufs: improperly managed inode reference counts in the vfsub_dentry_open() method 0.2%
- CVE-2021-3939 Free of static data in accountsservice 0.4%
- CVE-2021-3492 Ubuntu linux kernel shiftfs file system double free vulnerability 1.5%
- CVE-2020-27347 tmux stack buffer overflow in function input_csi_dispatch_sgr_colon 0.7%
- CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability 0.4%
- CVE-2020-15707 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 1.6%
- CVE-2020-15706 GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 1.0%
- CVE-2020-15705 GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 1.4%
- CVE-2020-8832 Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 0.5%