Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Ubuntu — Vulnerabilities & Security Advisories 38

Browse all 38 CVE security advisories affecting Ubuntu. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Ubuntu is an open-source Linux distribution primarily utilized for cloud infrastructure, enterprise servers, and Internet of Things (IoT) devices. Its extensive package repository and long-term support cycles make it a foundational component for modern data centers, though this breadth introduces a complex attack surface. Historically, vulnerabilities within the ecosystem frequently involve privilege escalation, remote code execution, and improper access controls, often stemming from third-party dependencies or misconfigured default settings rather than core kernel flaws. While major security incidents are relatively rare due to rigorous patching processes, the sheer volume of installed instances means that any critical flaw can have widespread impact. The current record of 38 Common Vulnerabilities and Exposures highlights the ongoing need for diligent system maintenance. Administrators must prioritize timely updates and strict configuration management to mitigate risks associated with these identified weaknesses and ensure the integrity of deployed services.

CVE ID Title CVSS Severity Published
CVE-2026-3497 OpenSSH 安全漏洞 — openssh CWE-908 2.7 Low 2026-03-12
CVE-2025-7044 Privilege Escalation in MAAS via Websocket Request Manipulation — MAAS CWE-269 7.7 High 2025-12-03
CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu — edk2 CWE-489 6.0AI Medium AI 2025-11-26
CVE-2023-0881 DDoS in Ubuntu package linux-bluefield — Ubuntu package linux-bluefield CWE-20 7.5 High 2025-03-31
CVE-2022-1804 Accountsservice incorrectly drops privileges — Linux CWE-269 5.5 Medium 2025-03-25
CVE-2020-11935 aufs: improperly managed inode reference counts in the vfsub_dentry_open() method — Linux kernel (aufs filesystem module) CWE-911 4.4 Medium 2023-04-07
CVE-2021-3939 Free of static data in accountsservice — accountsservice CWE-590 7.8 High 2021-11-17
CVE-2021-3493 Linux kernel 安全漏洞 — linux kernel CWE-270 8.8 High 2021-04-17
CVE-2021-3492 Ubuntu linux kernel shiftfs file system double free vulnerability — Linux kernel CWE-415 8.8 High 2021-04-17
CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability — libvirt CWE-732 9.3 Critical 2020-11-06
CVE-2020-15707 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. — grub2 in Ubuntu CWE-362 5.7 Medium 2020-07-29
CVE-2020-15706 GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. — grub2 in Ubuntu CWE-362 6.4 Medium 2020-07-29
CVE-2020-15705 GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim — grub2 in Ubuntu CWE-347 6.4 Medium 2020-07-29
CVE-2014-1423 Online Accounts Signon daemon gives out all oauth tokens to any app — signon CWE-522 5.9 Medium 2020-05-07
CVE-2019-15793 Mishandling of file-system uid/gid with namespaces in shiftfs — Shiftfs in the Linux kernel CWE-538 6.5 Medium 2020-04-23
CVE-2019-15794 Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs — Linux kernel CWE-672 7.1 High 2020-04-23
CVE-2019-15791 Reference count underflow in shiftfs — Shiftfs in the Linux kernel CWE-672 7.1 High 2020-04-23
CVE-2019-15792 Type confusion in shiftfs — Shiftfs in the Linux kernel CWE-843 7.1 High 2020-04-23
CVE-2020-8832 Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 — 18.04 LTS (bionic) Linux kernel CWE-200 5.5 Medium 2020-04-09
CVE-2012-2092 Ubuntu Cobbler 数据伪造问题漏洞 — Cobbler 7.4 - 2019-12-06
CVE-2019-7307 Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml — apport CWE-367 7.0 - 2019-08-29
CVE-2019-11476 Integer overflow in whoopsie results in out-of-bounds heap write — Whoopsie CWE-190 8.4 - 2019-08-29
CVE-2016-1586 Oxide 输入验证错误漏洞 — Oxide 7.5 - 2019-04-22
CVE-2016-1587 Snapweb interface 访问控制错误漏洞 — snapweb 7.5 - 2019-04-22
CVE-2016-1584 Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most — Unity8 5.3 - 2019-04-22
CVE-2016-1579 UDM doesn't check for confinement before running post-processing commands — Ubuntu Download Manager 9.8 - 2019-04-22
CVE-2016-1573 Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash — Unity8 8.4 - 2019-04-22
CVE-2015-1343 unity-scope-gdrive search feature logs search terms to syslog — unity-scope-gdrive 5.3 - 2019-04-22
CVE-2015-1341 Apport privilege escalation through Python module imports — Apport 8.4 - 2019-04-22
CVE-2015-1340 chmod race in doUidshiftIntoContainer — LXD 8.1 - 2019-04-22

This page lists every published CVE security advisory associated with Ubuntu. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.