Ubuntu vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 201918
3. 202011
4. 20213
5. 20231
6. 20254
7. 20262

Known exploitedNewest addition to KEV first

• CVE-2021-3493

  The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an…

  Ubuntu · linux kernel

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-109518

  APT RCE via hard link reuse

  Debian · APT

  High7.7
• CVE-2026-3497

  Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux…

  Ubuntu · openssh

  Low2.7
• CVE-2025-7044

  Privilege Escalation in MAAS via Websocket Request Manipulation

  Ubuntu · MAAS

  High7.7
• CVE-2025-2486

  UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

  Ubuntu · edk2

  Low3.7
• CVE-2023-0881

  DDoS in Ubuntu package linux-bluefield

  Ubuntu · Ubuntu package linux-bluefield

  High7.5
• CVE-2022-1804

  Accountsservice incorrectly drops privileges

  Ubuntu · Linux

  Medium5.5
• CVE-2020-11935

  aufs: improperly managed inode reference counts in the vfsub_dentry_open() method

  Ubuntu · Linux kernel (aufs filesystem module)

  Medium4.4
• CVE-2021-3939

  Free of static data in accountsservice

  Ubuntu · accountsservice

  High7.8
• CVE-2021-3493

  The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an…

  Ubuntu · linux kernel

  ExploitedHigh8.8
• CVE-2021-3492

  Ubuntu linux kernel shiftfs file system double free vulnerability

  Ubuntu · Linux kernel

  High8.8