Vendor
Canonical
10,748 known vulnerabilities in products by Canonical, 51 of them actively exploited (CISA KEV).
Key figures
10,748
Vulnerabilities
51
Actively exploited (KEV)
5
Used by ransomware
1,058
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2018-6789 | Exim Buffer Overflow Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-11043 | Underflow in PHP-FPM can lead to RCE In CISA KEVRansomware | 8.7 | |
| Critical | CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability In CISA KEV | 9.3 | |
| Critical | CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability In CISA KEVRansomware | 5.5 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-7247 | OpenSMTPD Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2010-0840 | Oracle JRE Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2025-68461 | RoundCube Webmail Cross-site Scripting Vulnerability In CISA KEV | 7.2 | |
| Critical | CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2019-10149 | Exim Mail Transfer Agent (MTA) Improper Input Validation In CISA KEV | 9.0 | |
| Critical | CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-3493 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2016-1646 | Google Chromium V8 Out-of-Bounds Read Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability In CISA KEV | 8.8 |
News
- PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malwarethehackernews,
- PHP2Shell exposes the weakness in coordinated vulnerability disclosurecsoonline,
- Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAFvmware-security,
- Two critical PHP flaws put the web on alert as emergency patches arrivecsoonline,
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensorssecurityweek,
- PHP ships emergency patches for critical PHP2Shell flawsbleepingcomputer,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Canonical Ubuntu Linux | 4,134 | 47 |
| Canonical LXD | 42 | 0 |
| Canonical Apport | 34 | 0 |
| Canonical Juju | 21 | 0 |
| Canonical Snapd | 17 | 0 |
| Canonical Cloud-init | 9 | 0 |
| Ubuntu 22.04 Lts | 8 | 0 |
| Ubuntu 24.04 Lts | 8 | 0 |
| Ubuntu 16.04 Lts | 6 | 0 |
| Ubuntu 18.04 Lts | 6 | 0 |
| Ubuntu 20.04 Lts | 6 | 0 |
| Ubuntu 26.04 Lts | 6 | 0 |
| Ubuntu Linux | 6 | 0 |
| Canonical Ltd. Authd | 5 | 0 |
| Canonical MAAS | 5 | 0 |
| Canonical Multipass | 5 | 0 |
| Canonical Ubuntu | 5 | 0 |
| Ubuntu MAAS | 5 | 0 |
| Canonical Python-apt | 4 | 0 |
| Ubuntu Core | 4 | 0 |
| Ubuntu Touch | 4 | 0 |
| Aptdaemon | 3 | 0 |
| Canonical PulseAudio | 3 | 0 |
| Canonical Subiquity | 3 | 0 |
| Landscape | 3 | 0 |
| Ubuntu-pro-client (ubuntu-advantage-tools) | 3 | 0 |