Login Request a demo
CL
Vendor
Canonical Ltd.
15 products with CVEs on record
33
CVEs
0
On KEV
0
New 30D
Products
AP
Apport
Canonical Ltd.
7.8
10 CVEs0 on KEV0 new
JU
Juju
Canonical Ltd.
8.0
5 CVEs0 on KEV0 new
LX
LXD
Canonical Ltd.
6.7
3 CVEs0 on KEV0 new
AU
Authd
Canonical Ltd.
8.8
2 CVEs0 on KEV0 new
SN
snapd
Canonical Ltd.
8.8
2 CVEs0 on KEV0 new
UG
Ubuntu's gnome-control-center
Canonical Ltd.
9.8
2 CVEs0 on KEV0 new
AC
Anbox Cloud
Canonical Ltd.
7.5
1 CVEs0 on KEV0 new
NE
Netplan
Canonical Ltd.
6.5
1 CVEs0 on KEV0 new
PE
Pebble
Canonical Ltd.
6.5
1 CVEs0 on KEV0 new
SU
subiquity
Canonical Ltd.
8.4
1 CVEs0 on KEV0 new
UA
Ubuntu Advantage Desktop Pro
Canonical Ltd.
5.5
1 CVEs0 on KEV0 new
UD
Ubuntu Desktop Provision
Canonical Ltd.
7.8
1 CVEs0 on KEV0 new
UE
Ubuntu EDK II
Canonical Ltd.
6.7
1 CVEs0 on KEV0 new
UP
Ubuntu's pulseaudio
Canonical Ltd.
4.0
1 CVEs0 on KEV0 new
WP
wpa_supplicant
Canonical Ltd.
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-5616
UG
Ubuntu's gnome-control-center
Canonical Ltd.
4.9
0%
Apr 15In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server
CVE-2023-0092
JU
Juju
Canonical Ltd.
4.9
1%
Jan 31An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem
CVE-2022-1736
UG
Ubuntu's gnome-control-center
Canonical Ltd.
9.8
1%
Jan 31Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default
CVE-2020-11936
AP
Apport
Canonical Ltd.
3.1
0%
Jan 31gdbus setgid privilege escalation
CVE-2022-28653
AP
Apport
Canonical Ltd.
7.5
0%
Jan 31Users can consume unlimited disk space in /var/crash
CVE-2024-6219
LX
LXD
Canonical Ltd.
3.8
0%
Dec 5Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured
CVE-2024-6156
LX
LXD
Canonical Ltd.
3.8
0%
Dec 5Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store
CVE-2024-11586
UP
Ubuntu's pulseaudio
Canonical Ltd.
4.0
0%
Nov 23Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected
CVE-2024-9312
AU
Authd
Canonical Ltd.
6.4
0%
Oct 10Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions
CVE-2024-9313
AU
Authd
Canonical Ltd.
8.8
1%
Oct 3Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including…
CVE-2024-8038
JU
Juju
Canonical Ltd.
5.5
0%
Oct 2Vulnerable juju introspection abstract UNIX domain socket
CVE-2024-8037
JU
Juju
Canonical Ltd.
6.5
0%
Oct 2Vulnerable juju hook tool abstract UNIX domain socket
CVE-2024-7558
JU
Juju
Canonical Ltd.
8.0
1%
Oct 2JUJU_CONTEXT_ID is a predictable authentication secret
CVE-2024-8287
AC
Anbox Cloud
Canonical Ltd.
7.5
0%
Sep 18Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent
CVE-2024-5290
WP
wpa_supplicant
Canonical Ltd.
7.8
1%
Aug 7An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the…
CVE-2024-6984
JU
Juju
Canonical Ltd.
3.8
0%
Jul 29An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation…
CVE-2024-6714
UD
Ubuntu Desktop Provision
Canonical Ltd.
7.8
0%
Jul 23An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege
CVE-2024-6388
UA
Ubuntu Advantage Desktop Pro
Canonical Ltd.
5.5
0%
Jun 27Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext
CVE-2020-27352
SN
snapd
Canonical Ltd.
8.8
0%
Jun 21When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the…
CVE-2022-4968
NE
Netplan
Canonical Ltd.
6.5
0%
Jun 7netplan leaks the private key of wireguard to local users
CVE-2022-28658
AP
Apport
Canonical Ltd.
5.5
0%
Jun 4Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
CVE-2022-28657
AP
Apport
Canonical Ltd.
7.8
0%
Jun 4Apport does not disable python crash handler before entering chroot
CVE-2022-28656
AP
Apport
Canonical Ltd.
5.5
0%
Jun 4is_closing_session() allows users to consume RAM in the Apport process
CVE-2022-28655
AP
Apport
Canonical Ltd.
7.1
0%
Jun 4is_closing_session() allows users to create arbitrary tcp dbus connections
CVE-2022-28654
AP
Apport
Canonical Ltd.
5.5
0%
Jun 4is_closing_session() allows users to fill up apport.log
CVE-2022-28652
AP
Apport
Canonical Ltd.
5.5
0%
Jun 4~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
CVE-2022-1242
AP
Apport
Canonical Ltd.
7.8
0%
Jun 3Apport can be tricked into connecting to arbitrary sockets as the root user
CVE-2021-3899
AP
Apport
Canonical Ltd.
7.8
0%
Jun 3There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root
CVE-2022-0555
SU
subiquity
Canonical Ltd.
8.4
0%
Jun 3Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
CVE-2024-5138
SN
snapd
Canonical Ltd.
8.1
1%
May 31The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap
CVE-2024-3250
PE
Pebble
Canonical Ltd.
6.5
0%
Apr 4It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with…
CVE-2023-49721
LX
LXD
Canonical Ltd.
6.7
0%
Feb 14An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD
CVE-2023-48733
UE
Ubuntu EDK II
Canonical Ltd.
6.7
0%
Feb 14An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2