Vendor
Ubuntu
32 known vulnerabilities in products by Ubuntu, 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-5736 | The Linux Foundation runc: security vulnerability | 8.6 | |
| Critical | CVE-2016-8649 | Linux Containers LXC: security vulnerability | 9.1 | |
| High | CVE-2016-10124 | Linux Containers LXC: security vulnerability | 8.6 | |
| High | CVE-2017-18641 | Linux Containers LXC: security vulnerability | 8.1 | |
| High | CVE-2026-23954 | Incus container image templating arbitrary host file read and write | 8.7 | |
| Critical | CVE-2026-33897 | Incus vulnerable to arbitrary file read and write through pongo templates | 10.0 | |
| Critical | CVE-2026-33945 | Abitrary file write through systemd-creds option | 10.0 | |
| High | CVE-2026-23953 | Incus container environment configuration newline injection | 8.7 | |
| High | CVE-2026-33898 | Local Incus UI web server vulnerable to nuthentication bypass | 8.8 | |
| High | CVE-2015-1340 | chmod race in doUidshiftIntoContainer | 7.0 | |
| High | CVE-2026-40251 | Incus out-of-bounds panic in snapshot metadata handling allows denial of service | 6.5 | |
| High | CVE-2026-40195 | Incus nil-pointer dereference in storage bucket import allows denial of service | 6.5 | |
| High | CVE-2026-33711 | Incus vulnerable to local privilege escalation through VM screenshot path | 7.8 | |
| High | CVE-2026-40197 | Incus nil-pointer dereference in custom volume import allows denial of service | 6.5 | |
| Medium | CVE-2026-41684 | Incus: Nil Dereferences on Restore via Malformed YAML | 6.5 | |
| Medium | CVE-2026-41647 | Incus: Nil-Pointer Dereference via S3 Bucket Import | 6.5 | |
| Medium | CVE-2026-33743 | Incus vulnerable to denial of source through crafted bucket backup file | 6.5 | |
| High | CVE-2025-64507 | Incus vulnerable to local privilege escalation through custom storage volumes | 7.8 | |
| Medium | CVE-2026-39402 | lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion | 6.5 | |
| Medium | CVE-2026-35527 | Incus blind SSRF via image import preflight HEAD request | 5.0 | |
| Medium | CVE-2026-41648 | Incus: Unbounded YAML Metadata Decode via Parsing | 5.0 | |
| Medium | CVE-2026-33542 | Incus does not verify combined fingerprint when downloading images from simplestreams servers | 4.8 | |
| Medium | CVE-2026-41685 | Incus: Unbounded binary import disk exhaustion | 4.3 | |
| Low | CVE-2022-47952 | Linux Containers LXC: security vulnerability | 3.3 | |
| Medium | CVE-2026-40243 | Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation | 4.8 |
Products
| Linux Containers LXC Incus | 18 | 0 |
| Linux Containers LXC | 12 | 0 |