Canonical vulnerabilities

173 published CVEs name Canonical among the affected products.

Newest CVEs

CVE-2026-84410
apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processing
Canonical · apport
High7.3
CVE-2026-86692
apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keys
Canonical · apport
Medium5.7
CVE-2026-112816
Improper certificate validation in the HTTPS listener in LXD
Canonical · LXD
Critical10.0
CVE-2026-93336
Missing authorization in the unit resources download route in Juju controllers
Canonical · Juju
High7.1
CVE-2026-102631
authd: Account takeover via username fallback in identity matching after IdP email reassignment
Canonical · authd
Medium5.9
CVE-2026-104055
Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
Canonical · postgresql-operator
Medium5.3
CVE-2026-12392
RPC secret disclosure via vendor data endpoint in Canonical MAAS
Canonical · MAAS
Medium5.3
CVE-2026-102371
wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments
Canonical · Ubuntu Pro for WSL
Medium5.7
CVE-2026-87798
LXD client recursive file pull allows directory escape via malicious VM agent
Canonical · LXD
Medium5.8
CVE-2026-87799
Arbitrary file write on LXD host via symlink in migration stream
Canonical · LXD
Critical9.9