Advisories · Technology
Canonical Ubuntu 24.04 LTS.
Every CVE that names Canonical Ubuntu 24.04 LTS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup
- Canonical Ubuntu 26.04 LTS
- Canonical Ubuntu 24.04 LTS
- Privilege escalation
- CVSS 8.4 High
snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates
- Canonical Ubuntu 26.04 LTS
- Canonical Ubuntu 24.04 LTS
- Privilege escalation
- CVSS 5.6 Medium
AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd
- Canonical Ubuntu 26.04 LTS
- Canonical Ubuntu 24.04 LTS
- CWE-212
- CVSS 5.0 Medium
ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- CWE-20
- CVSS 5.5 Medium
ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- CWE-214
- CVSS 7.8 High
Local Privilege Escalation in snapd
- Canonical Ubuntu 16.04 LTS
- Canonical Ubuntu 18.04 LTS
- Privilege escalation