Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Canonical — Vulnerabilities & Security Advisories 145

Browse all 145 CVE security advisories affecting Canonical. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Canonical Ltd. primarily develops and maintains Ubuntu, a widely deployed Linux distribution, alongside the OpenStack cloud infrastructure platform and the Snap package management system. Security audits reveal a significant volume of recorded vulnerabilities, currently totaling 107 CVEs, reflecting the extensive codebase and third-party dependencies inherent in these large-scale software ecosystems. Historically, the most prevalent vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from improper input validation or insecure default configurations within associated services. While no single catastrophic incident has defined the company’s security history, the sheer number of disclosed issues highlights the challenges of maintaining rigorous patch cycles across diverse components. These findings underscore the necessity for continuous monitoring and timely updates for organizations relying on Canonical’s open-source technologies to mitigate potential exploitation risks.

Found 13 results / 145 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-47337 NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation — Ubuntu Linux CWE-476 3.3 Low 2026-05-28
CVE-2026-47336 Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules — Ubuntu Linux CWE-457 3.3 Low 2026-05-28
CVE-2026-47335 NULL pointer dereference in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-476 5.5 Medium 2026-05-28
CVE-2026-47334 Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-833 5.5 Medium 2026-05-28
CVE-2026-47333 Out-of-bounds read in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-125 7.8 High 2026-05-28
CVE-2026-47332 Out-of-bounds read in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-125 5.5 Medium 2026-05-28
CVE-2026-47331 Use-after-free in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-416 7.8 High 2026-05-28
CVE-2026-47330 Use of uninitialized value in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-457 3.3 Low 2026-05-28
CVE-2026-47329 Incorrect validation of field size in Ubuntu Linux AppArmor notification responses — Ubuntu Linux CWE-1284 3.3 Low 2026-05-28
CVE-2026-47328 Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-590 6.1 Medium 2026-05-28
CVE-2026-47327 NULL pointer dereference in Ubuntu Linux AppArmor notification handling — Ubuntu Linux CWE-476 3.3 Low 2026-05-28
CVE-2026-47326 Memory leak in Ubuntu Linux AppArmor large notification response allocation — Ubuntu Linux CWE-401 5.5 Medium 2026-05-28
CVE-2025-13350 Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel — Ubuntu Linux CWE-416 5.5 - 2026-03-05

This page lists every published CVE security advisory associated with Canonical. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.