Ubuntu Linux
productDEcpe:/o:canonical:ubuntu_linux:-
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
618critical4433high9178medium234low
updated 2026-10-26
01
vulnerabilities (23,805)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-44228US | critical10.0OT critical | KEV |
| CVE-2021-40438US | critical9.0OT critical | KEV |
| CVE-2017-12617US | high8.1OT critical | KEV |
| CVE-2021-3156US | high7.8OT critical | KEV |
| CVE-2024-38475US | critical9.1OT critical | KEV |
| CVE-2025-24813US | critical9.8OT critical | KEV |
| CVE-2022-22963US | critical9.8OT critical | KEV |
| CVE-2022-46169US | critical9.8OT critical | KEV |
| CVE-2023-38831US | high7.8OT critical | KEV |
| CVE-2025-49113US | high8.8OT critical | KEV |
| CVE-2017-12615US | high8.1OT critical | KEV |
| CVE-2020-16846US | critical9.8OT critical | KEV |
| CVE-2015-5477US | high7.8OT critical | KEV |
| CVE-2026-24061US | —OT critical | KEV |
| CVE-2025-32433US | —OT critical | KEV |
| CVE-2019-5418US | high7.5OT critical | KEV |
| CVE-2026-31431US | —OT critical | KEV |
| CVE-2020-11651US | critical9.8OT critical | KEV |
| CVE-2020-17530US | critical9.8OT critical | KEV |
| CVE-2016-4437US | critical9.8OT critical | KEV |
| CVE-2022-0847US | high7.8OT critical | KEV |
| CVE-2020-11652US | medium6.5OT critical | KEV |
| CVE-2020-28949US | high7.8OT critical | KEV |
| CVE-2025-14847US | —OT critical | KEV |
| CVE-2024-42009US | critical9.3OT critical | KEV |
| CVE-2024-37383US | medium6.1OT critical | KEV |
| CVE-2019-0211US | high7.8OT critical | KEV |
| CVE-2020-15999US | critical9.6OT critical | KEV |
| CVE-2025-32463US | high7.8OT critical | KEV |
| CVE-2023-5217US | high8.8OT critical | KEV |
| CVE-2020-13671US | high8.8OT critical | KEV |
| CVE-2024-1086US | high7.8OT critical | KEV |
| CVE-2025-27363US | high8.1OT critical | KEV |
| CVE-2025-68461US | medium6.1OT critical | KEV |
| CVE-2023-28205US | high8.8OT critical | KEV |
| CVE-2022-0185US | high8.4OT critical | KEV |
| CVE-2024-9680US | critical9.8OT critical | KEV |
| CVE-2023-7101US | high7.8OT critical | KEV |
| CVE-2025-6558US | —OT critical | KEV |
| CVE-2022-2586US | high7.8OT critical | KEV |
| CVE-2024-44308US | high8.8OT critical | KEV |
| CVE-2022-0995US | high7.8OT critical | KEV |
| CVE-2025-41244US | —OT critical | KEV |
| CVE-2022-0492US | high7.8OT critical | KEV |
| CVE-2025-48384US | —OT critical | KEV |
| CVE-2025-24201US | critical10.0OT critical | KEV |
| CVE-2023-0266US | high7.0OT critical | KEV |
| CVE-2024-53104US | high7.8OT critical | KEV |
| CVE-2025-39682US | critical9.8OT critical | KEV |
| CVE-2024-36971US | high7.8OT critical | KEV |
showing 50 of 23,805
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-476NULL Pointer Dereference3,403 CVEs
- CWE-416Use After Free3,224 CVEs
- CWE-20Improper Input Validation2,469 CVEs
- CWE-125Out-of-bounds Read1,849 CVEs
- CWE-401Missing Release of Memory after Effective Lifetime1,794 CVEs
- CWE-787Out-of-bounds Write1,536 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1,203 CVEs
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1,149 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)23,805 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan