Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how canonical compares to other vendors in security performance

View Risk Score →

Canonical snapdAppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

Risk 33
Severity
5.6
First published (updated )
CVE-2024-5300

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs

Risk 29
Severity
5
First published (updated )
CVE-2026-12391

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line

Risk 24
Severity
5.5
EPSS
0.11%
First published (updated )
CVE-2026-9494

Canonical LXDSSRF via image import from URL allows internal network probing by authenticated users

Risk 26
Severity
5
First published (updated )
CVE-2026-28385

Canonical LXDAuthenticated Denial of Service via Malicious Backup Tarball in LXD

Risk 27
Severity
6.5
EPSS
0.42%
First published (updated )
CVE-2026-9639
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical MicroCephMicroCeph path traversal issue in the remote-import API

Risk 47
Severity
5.1
First published (updated )
CVE-2026-10720

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47335

Canonical Ubuntu LinuxDeadlock or kernel panic in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47334

Canonical Ubuntu LinuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47332

Canonical Ubuntu LinuxInvalid pointer deallocation in Ubuntu Linux AppArmor notification handling

Risk 41
Severity
6.1
First published (updated )
CVE-2026-47328
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu LinuxMemory leak in Ubuntu Linux AppArmor large notification response allocation

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47326

Poppler pdfunitePDFunite 0.41.0 Buffer Overflow via Malformed PDF

Risk 38
Severity
6.9
First published (updated )
CVE-2018-25306

snap/canonical-livepatchExposed Session Token in canonical-livepatch client snap

Risk 24
Severity
5.7
EPSS
0.02%
First published (updated )
CVE-2026-6369

Canonical JujuJuju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map

Risk 37
Severity
6
EPSS
0.01%
First published (updated )
CVE-2026-5774

Canonical JujuJuju: Read All Controller Logs From Compromised Workload

Risk 36
Severity
6.9
First published (updated )
CVE-2025-68152
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical IncusIncus vulnerable to denial of source through crafted bucket backup file

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2026-33743

jujuInsecure Direct Object Reference attack via predictable secret ID in Juju

Risk 46
Severity
6.6
EPSS
0.03%
First published (updated )
CVE-2026-32694

juju/jujuTiming ownership claim attack on new external back-end secrets

Risk 23
Severity
5.3
EPSS
0.01%
First published (updated )
CVE-2026-32691

Canonical Ubuntu LinuxLast updated 30 June 2026

Risk 41
Severity
6.9
EPSS
0.03%
First published (updated )
CVE-2026-3497

Ubuntu Python-aptNull-pointer dereference in python-apt TagSection.keys()

Risk 38
Severity
6.9
First published (updated )
CVE-2025-6966
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXD-UIClient-Side Path Traversal in LXD-UI

Risk 24
Severity
4.8
First published (updated )
CVE-2025-54292

Canonical LXDProject existence disclosure in LXD images API

Risk 33
Severity
6.9
First published (updated )
CVE-2025-54291

Canonical LXDProject Existence Disclosure via Error Handling in LXD Image Export

Risk 33
Severity
6.9
First published (updated )
CVE-2025-54290

Canonical LXDSource Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Risk 37
Severity
6.8
First published (updated )
CVE-2025-54288

Canonical JujuSensitive log retrieval in Juju

Risk 38
Severity
6.5
First published (updated )
CVE-2025-53512
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical JujuKey leakage in juju/utils certificates

Risk 27
Severity
6.5
EPSS
0.01%
First published (updated )
CVE-2025-6224

cloud-init cloud-initcloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default S…

Risk 42
Severity
5.9
First published (updated )
CVE-2024-11584

Canonical Ubuntu LinuxRace Condition in Canonical Apport

Risk 22
Severity
4.7
EPSS
0.01%
First published (updated )
CVE-2025-5054

Gnome Control CenterLast updated 19 August 2025

Risk 28
Severity
4.9
EPSS
0.06%
First published (updated )
CVE-2023-5616

AccountsService accountsserviceAccountsservice incorrectly drops privileges

Risk 32
Severity
5.5
First published (updated )
CVE-2022-1804
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203