Ubuntu's vulnerability footprint centers on a small but exceptionally prominent product line: the Ubuntu Linux distribution and its integrated package-management tooling, which serve as the base platform for a vast ecosystem of cloud deployments, container images, and enterprise infrastructure. Vulnerabilities affecting the vendor recur through a broad spectrum of upstream open-source components and platform code, spanning input-validation issues, memory-safety flaws, resource-consumption problems, and information-disclosure weaknesses that reflect the diversity of a full-featured operating system. Public exploit code frequently becomes available for Ubuntu vulnerabilities, reflecting both the high visibility of the distribution and the upstream maturity of disclosed flaws; the exposure therefore merits close attention despite the concentrated product scope. Defenders should monitor Ubuntu's security advisories as a leading indicator of threats to the broader Linux ecosystem and treat patch timing as critical across container orchestration, cloud instances, and deployed server infrastructure. Current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ubuntu over time
Signals from CVEs in this vendor scope (4404 CVEs).
4,404 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2020-1472CRITICAL An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc | Aug 17, 2020 | 10.0 | 99 | YES | YES |
CVE-2020-7247CRITICAL smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP sessio | Jan 29, 2020 | 9.8 | 99 | YES | YES |
CVE-2017-12617HIGH When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation | Oct 4, 2017 | 8.1 | 99 | YES | YES |
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-0160HIGH The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform | Apr 7, 2014 | 7.5 | 99 | YES | YES |
CVE-2023-4911HIGH A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us | Oct 3, 2023 | 7.8 | 98 | YES | YES |
CVE-2022-0543CRITICAL It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code exec | Feb 18, 2022 | 10.0 | 98 | YES | YES |
CVE-2021-4034HIGH A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri | Jan 28, 2022 | 7.8 | 98 | YES | YES |
CVE-2020-11651CRITICAL An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re | Apr 30, 2020 | 9.8 | 98 | YES | YES |
Signals from CVEs in this vendor scope (4404 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ubuntu.
Media articles that mention a CVE ID that affects a product developed by Ubuntu — matched by CVE ID, not by vendor name.