Vulnerabilities in Canonical
171 resultsCVE-2026-63295MEDIUMProject restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`EPSS 0.3%CVE-2020-8833MEDIUMApport race condition in crash report permissionsEPSS 0.3%CVE-2026-63297CRITICALCross-project instance copy bypasses target project restrictions via TOCTOU in config mergeEPSS 0.3%CVE-2020-16128LOWAptdaemon error messages disclosed file existence to unprivileged users via dbus propertiesEPSS 0.3%CVE-2025-54290MEDIUMProject Existence Disclosure via Error Handling in LXD Image ExportEPSS 0.3%CVE-2021-32556LOWapport get_modified_conffiles() function command injectionEPSS 0.3%CVE-2026-86334MEDIUMCLI Path Traversal via Content-Disposition in LXD Image Export/CopyEPSS 0.3%CVE-2020-11931LOWUbuntu modifications to pulseaudio to provide snap security enforcement could be unloadedEPSS 0.3%CVE-2025-54292MEDIUMClient-Side Path Traversal in LXD-UIEPSS 0.3%CVE-2020-15709—add-apt-repository print ASNI terminal codesEPSS 0.3%CVE-2021-32553HIGHapport read_file() function could follow maliciously constructed symbolic linksEPSS 0.3%CVE-2026-32693HIGHUnauthorized access to Kubernetes secrets in JujuEPSS 0.3%CVE-2025-15480LOWSenstive information disclosure was affecting ubuntu-desktop-provisionEPSS 0.3%CVE-2020-16123MEDIUMBypass of snapd pulseaudio restrictionsEPSS 0.3%CVE-2026-8933HIGHsnap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment SetupEPSS 0.3%CVE-2024-1724MEDIUMsnapd allows $HOME/bin symlinkEPSS 0.3%CVE-2026-112816CRITICALImproper certificate validation in the HTTPS listener in LXDEPSS 0.3%CVE-2025-5689HIGHImproper Permission Management in SSH Session HandlingEPSS 0.3%CVE-2026-10720MEDIUMMicroCeph path traversal issue in the remote-import APIEPSS 0.3%CVE-2020-15710MEDIUMPotential double-free in pulseaudioEPSS 0.3%