Ubuntu Linux 16.04 LTS

productDE

cpe:/o:canonical:ubuntu_linux:16.04_lts

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

6critical18high14medium0low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2016-2776US	high7.5	89.5% (100th)	Exploit	no fix	2016-09-28	—
CVE-2017-1000112US	high7.0	20.8% (98th)	Exploit	no fix	2017-10-05	—
CVE-2016-1247US	high7.8	4.86% (92nd)	Exploit	no fix	2016-11-29	—
CVE-2017-2636US	high7.0	1.03% (64th)	Exploit	no fix	2017-03-07	—
CVE-2018-5378US	medium5.9	74.2% (99th)	—	no fix	2018-02-19	—
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2018-5379US	critical9.8	38.5% (99th)	—	no fix	2018-02-19	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2018-5381US	high7.5	30.2% (98th)	—	no fix	2018-02-19	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2017-14461US	high7.1	16.7% (97th)	—	no fix	2018-03-02	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2018-5380US	medium4.3	14.8% (97th)	—	no fix	2018-02-19	—
CVE-2016-6307US	medium5.9	13.8% (97th)	—	no fix	2016-09-26	—
CVE-2016-0718US	critical9.8	13.3% (96th)	—	no fix	2016-05-26	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2013-7459US	critical9.8	9.58% (95th)	—	no fix	2017-02-15	—
CVE-2017-2820US	high8.8	4.42% (91st)	—	no fix	2017-07-12	—
CVE-2017-9775US	medium6.5	4.34% (91st)	—	no fix	2017-06-22	—
CVE-2017-15130US	medium5.9	2.55% (85th)	—	no fix	2018-03-02	—
CVE-2017-9408US	medium6.5	2.39% (84th)	—	no fix	2017-06-02	—
CVE-2017-9023US	high7.5	2.22% (83rd)	—	no fix	2017-06-08	—
CVE-2017-9022US	high7.5	1.73% (77th)	—	no fix	2017-06-08	—
CVE-2017-9406US	medium6.5	1.46% (73rd)	—	no fix	2017-06-02	—
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—
CVE-2017-7515US	medium5.5	1.14% (66th)	—	no fix	2017-06-06	—
CVE-2017-9083US	medium6.5	1.12% (66th)	—	no fix	2017-05-19	—
CVE-2017-7511US	medium5.5	1.09% (65th)	—	no fix	2017-05-30	—
CVE-2017-1000111US	high7.8	0.37% (31st)	—	no fix	2017-10-05	—
CVE-2016-10200US	high7.0	0.30% (22nd)	—	no fix	2017-03-07	—
CVE-2017-6590US	medium6.3OT elevated	0.28% (20th)	—	no fix	2017-03-09	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-399CWE-3993 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan