Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how canonical compares to other vendors in security performance

View Risk Score →

Software

canonical ubuntu linux
2330
canonical juju
15
canonical ubuntu
14
canonical lxd
13
canonical snapd
11
canonical apport
8
canonical accountsservice
5
canonical apparmor
5
canonical multipass
4
canonical cloud-init
3
canonical linux kernel (azure)
3
canonical metal as a service
3
canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)
3
canonical incus
2
canonical linux kernel (nvidia tegra)
2
canonical linux kernel (nvidia)
2
canonical maas
2
canonical snapd snap-confine
2
canonical ubuntu core
2
canonical ubuntu linux kernel
2
canonical ubuntu touch
2
canonical unity-firefox-extension
2
canonical update-manager
2
canonical adsys
1
canonical c-kernel
1
canonical juju\/utils go
1
canonical libpam-modules
1
canonical linux kernel
1
canonical linux kernel (azure fips)
1
canonical linux kernel (gcp)
1
canonical linux kernel (intel iotg real-time)
1
canonical livepatch client
1
canonical ltsp display manager
1
canonical lxd (devlxd api)
1
canonical lxd-ui
1
canonical microceph
1
canonical microk8s
1
canonical multipass for macos
1
canonical netplan
1
canonical openssh
1
canonical pdfunite
1
canonical php5
1
canonical ppp
1
canonical screen-resolution-extra
1
canonical snap store
1
canonical snapd (snap-confine)
1
canonical snapd (snap-confine) on ubuntu desktop 24.04
1
canonical snapd (snap-confine) on ubuntu desktop 25.10
1
canonical snapd (snap-confine) on ubuntu desktop 26.04
1
canonical software-properties
1

oss-secLPE in snapd and other vulnerabilities

First published (updated )
https://seclists.org/oss-sec/2026/q3/192

oss-secLPE in snapd and other vulnerabilities

First published (updated )
https://seclists.org/oss-sec/2026/q3/191

Canonical snapd snap-confinesnapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates

Risk 62
Severity
8.4
First published (updated )
CVE-2026-15226

Canonical snapdAppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

Risk 33
Severity
5.6
First published (updated )
CVE-2024-5300

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs

Risk 29
Severity
5
First published (updated )
CVE-2026-12391
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

Risk 78
Severity
9
First published (updated )
CVE-2026-11386

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line

Risk 24
Severity
5.5
EPSS
0.11%
First published (updated )
CVE-2026-9494

Canonical LXDSSRF via image import from URL allows internal network probing by authenticated users

Risk 26
Severity
5
First published (updated )
CVE-2026-28385

LXD LXDLXD Snapshot Import Privilege Escalation Vulnerability

Risk 49
Severity
7.2
EPSS
0.37%
First published (updated )
CVE-2026-9640

Canonical LXDAuthenticated Denial of Service via Malicious Backup Tarball in LXD

Risk 27
Severity
6.5
EPSS
0.42%
First published (updated )
CVE-2026-9639
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXD (devLXD API)Broken Access Control in Canonical LXD DevLXD API

Risk 68
Severity
9.6
First published (updated )
CVE-2026-12411

Canonical ADSysCanonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment

Risk 79
Severity
9
First published (updated )
CVE-2026-12249

Canonical MicroCephMicroCeph path traversal issue in the remote-import API

Risk 47
Severity
5.1
First published (updated )
CVE-2026-10720

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47337

Ubuntu Ubuntu LinuxUse of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47336
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47335

Canonical Ubuntu LinuxDeadlock or kernel panic in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47334

Canonical Ubuntu LinuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47333

Canonical Ubuntu LinuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47332

Canonical Ubuntu LinuxUse-after-free in Ubuntu Linux AppArmor notification handling

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47331
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu LinuxUse of uninitialized value in Ubuntu Linux AppArmor notification handling

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47330

Canonical Ubuntu LinuxIncorrect validation of field size in Ubuntu Linux AppArmor notification responses

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47329

Canonical Ubuntu LinuxInvalid pointer deallocation in Ubuntu Linux AppArmor notification handling

Risk 41
Severity
6.1
First published (updated )
CVE-2026-47328

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor notification handling

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47327

Canonical Ubuntu LinuxMemory leak in Ubuntu Linux AppArmor large notification response allocation

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47326
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Multipass for macOSLocal Privilege Escalation in Canonical Multipass

Risk 69
Severity
7.8
First published (updated )
CVE-2026-49237

Canonical MultipassSFTP Server VM Escape in Canonical Multipass

Risk 59
Severity
8.4
First published (updated )
CVE-2026-49238

ZDNetDirty Frag is a new Linux bug putting your system at risk - and there's no easy fix yet

Exploited
First published (updated )
News
ZDNet

ZDNetDirty Frag is a new Linux bug putting your system at risk - and there's no easy fix yet

Exploited
First published (updated )
News
ZDNet

BleepingComputerNew Linux 'Dirty Frag' zero-day gives root on all major distros

Exploited
Zeroday
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203