Search CVE reports


Toggle filters

11 – 20 of 42805 results

Status is adjusted based on your filters.


CVE-2026-5734

Medium priority
Needs evaluation

Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 18.04 LTS
firefox
thunderbird
mozjs38 Needs evaluation
mozjs52 Ignored
mozjs68
mozjs78
mozjs91
mozjs102
mozjs115
Show all 9 packages Show less packages

CVE-2026-5732

Medium priority
Needs evaluation

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability affects Firefox < 149.0.2, Firefox ESR < 140.9.1, Thunderbird < 149.0.2, and Thunderbird < 140.9.1.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 18.04 LTS
firefox
thunderbird
mozjs38 Needs evaluation
mozjs52 Ignored
mozjs68
mozjs78
mozjs91
mozjs102
mozjs115
Show all 9 packages Show less packages

CVE-2026-5731

Medium priority
Needs evaluation

Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough...

9 affected packages

mozjs68, mozjs78, mozjs91, mozjs102, mozjs115...

Package 18.04 LTS
mozjs68
mozjs78
mozjs91
mozjs102
mozjs115
firefox
thunderbird
mozjs38 Needs evaluation
mozjs52 Ignored
Show all 9 packages Show less packages

CVE-2026-39881

Medium priority
Needs evaluation

[Ex command injection in Vims NetBeans integration]

1 affected package

vim

Package 18.04 LTS
vim Needs evaluation
Show less packages

CVE-2026-33551

Medium priority
Needs evaluation

[Restricted application credentials can create EC2 credentials]

1 affected package

keystone

Package 18.04 LTS
keystone Needs evaluation
Show less packages

CVE-2026-31411

Medium priority
Needs evaluation

[net: atm: fix crash due to unvalidated vcc pointer in sigd_send()]

157 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 18.04 LTS
linux Needs evaluation
linux-hwe Ignored
linux-hwe-5.4 Needs evaluation
linux-hwe-5.8
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15
linux-hwe-5.19
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-6.8
linux-hwe-6.11
linux-hwe-6.14
linux-hwe-6.17
linux-hwe-edge Ignored
linux-lts-xenial
linux-kvm Needs evaluation
linux-allwinner-5.19
linux-aws Needs evaluation
linux-aws-5.0 Ignored
linux-aws-5.3 Ignored
linux-aws-5.4 Needs evaluation
linux-aws-5.8
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15
linux-aws-5.19
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8
linux-aws-6.14
linux-aws-6.17
linux-aws-hwe
linux-azure Ignored
linux-azure-4.15 Needs evaluation
linux-azure-5.3 Ignored
linux-azure-5.4 Needs evaluation
linux-azure-5.8
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15
linux-azure-5.19
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8
linux-azure-6.11
linux-azure-6.14
linux-azure-6.17
linux-azure-fde
linux-azure-fde-5.15
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fde-6.8
linux-azure-fde-6.14
linux-azure-fde-6.17
linux-azure-nvidia
linux-azure-nvidia-6.14
linux-bluefield
linux-azure-edge Ignored
linux-fips Needs evaluation
linux-aws-fips Needs evaluation
linux-azure-fips Needs evaluation
linux-gcp-fips Needs evaluation
linux-gcp Ignored
linux-gcp-4.15 Needs evaluation
linux-gcp-5.3 Ignored
linux-gcp-5.4 Needs evaluation
linux-gcp-5.8
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15
linux-gcp-5.19
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-6.8
linux-gcp-6.11
linux-gcp-6.14
linux-gcp-6.17
linux-gke
linux-gke-4.15 Ignored
linux-gke-5.4 Ignored
linux-gke-5.15
linux-gkeop
linux-gkeop-5.4 Ignored
linux-gkeop-5.15
linux-ibm
linux-ibm-5.4 Needs evaluation
linux-ibm-5.15
linux-ibm-6.8
linux-intel-5.13
linux-intel-iotg
linux-intel-iotg-5.15
linux-iot
linux-intel-iot-realtime
linux-lowlatency
linux-lowlatency-hwe-5.15
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.11
linux-nvidia
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8
linux-nvidia-6.11
linux-nvidia-lowlatency
linux-nvidia-tegra
linux-nvidia-tegra-5.15
linux-nvidia-tegra-igx
linux-oracle Needs evaluation
linux-oracle-5.0 Ignored
linux-oracle-5.3 Ignored
linux-oracle-5.4 Needs evaluation
linux-oracle-5.8
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15
linux-oracle-6.5
linux-oracle-6.8
linux-oracle-6.14
linux-oracle-6.17
linux-oem Ignored
linux-oem-5.6
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-6.0
linux-oem-6.1
linux-oem-6.5
linux-oem-6.8
linux-oem-6.11
linux-oem-6.14
linux-oem-6.17
linux-raspi
linux-raspi2
linux-raspi-5.4 Needs evaluation
linux-raspi-realtime
linux-realtime
linux-realtime-6.8
linux-realtime-6.14
linux-riscv
linux-riscv-5.8
linux-riscv-5.11
linux-riscv-5.15
linux-riscv-5.19
linux-riscv-6.5
linux-riscv-6.8
linux-riscv-6.14
linux-riscv-6.17
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx
linux-xilinx-zynqmp
linux-realtime-6.17
Show all 157 packages Show less packages

CVE-2026-34582

Medium priority
Needs evaluation

Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being received. A server which is attempting to enforce client...

2 affected packages

botan, botan3

Package 18.04 LTS
botan Needs evaluation
botan3
Show less packages

CVE-2026-34580

Medium priority
Needs evaluation

Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a DN (and subject key identifier, if set) matching...

2 affected packages

botan3, botan

Package 18.04 LTS
botan3
botan Needs evaluation
Show less packages

CVE-2026-34079

Medium priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache...

1 affected package

flatpak

Package 18.04 LTS
flatpak Needs evaluation
Show less packages

CVE-2026-34078

Medium priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run...

1 affected package

flatpak

Package 18.04 LTS
flatpak Needs evaluation
Show less packages