Ubuntu Linux

Vendor:

First CVE: Jul 16, 1996 · Active for 30 years

4,277
Total CVEs
More Total CVEs than 99% of tracked products
178.2
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 28% of tracked products
1.1%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ubuntu Linux over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 16, 1996
30 years ago
Most Recent CVE
Jul 8, 2026
16 days ago

CVE Severity & Scoring

Ubuntu Linux4,277 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local979 (22.9%)
Network1,969 (46.0%)
Unknown1,235 (28.9%)
Physical51 (1.2%)
Adjacent Network43 (1.0%)
Attack Complexity
Low2,629 (61.5%)
High413 (9.7%)
Unknown1,235 (28.9%)
User Interaction
None2,125 (49.7%)
Unknown1,235 (28.9%)
Required917 (21.4%)
Privileges Required
Low789 (18.4%)
High224 (5.2%)
None2,029 (47.4%)
Unknown1,235 (28.9%)

Top CVEs

Signals from CVEs in this product scope (4277 CVEs).

4,277 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c
Apr 22, 20267.899YESYES
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc
Aug 17, 202010.099YESYES
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP sessio
Jan 29, 20209.899YESYES
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation
Oct 4, 20178.199YESYES
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform
Apr 7, 20147.599YESYES
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us
Oct 3, 20237.898YESYES
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code exec
Feb 18, 202210.098YESYES
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri
Jan 28, 20227.898YESYES
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re
Apr 30, 20209.898YESYES

Exploit Exposure

Signals from CVEs in this product scope (4277 CVEs).

CISA KEV
47 CVEs
1.1% of CVEs· Bottom 1%
Metasploit
83 CVEs
1.9% of CVEs· Bottom 1%
Nuclei
23 CVEs
0.5% of CVEs· Bottom 1%
ExploitDB
248 CVEs
5.8% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (4277 CVEs).

Media Mentions

Signals from CVEs in this product scope (4277 CVEs).

Top CNAs Publishing CVEs For Ubuntu Linux

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.101286.68.2%424
9.0.421.90.3%00
9.041086.49.3%220
8.1.011.90.4%00
8.101006.59.4%118
8.0.4_lts11.90.4%00
8.042386.59.4%437
7.10906.810.8%012
7.04797.011.8%010
7.013.30.1%00
6.834.00.1%00
6.1713.30.1%00
6.10726.712.2%08
6.06_lts66.42.3%00
6.062466.510.6%345
5.10466.810.7%08
5.04326.08.1%04
4.10226.15.1%01
4.1466.64.4%06
26.0495.30.1%00