Vulnerabilidades en Canonical

150 resultados
Análisis Vexday

O portfólio de vulnerabilidades da Canonical soma 121 CVEs catalogadas, com 8 classificadas como críticas e nenhuma entrada no catálogo KEV da CISA — taxa de exploração ativa abaixo da média geral do catálogo. Apesar desse perfil relativamente contido, o CVE-2019-7304 chama atenção por registrar o maior score EPSS observado no conjunto (0,6108), indicando probabilidade elevada de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente. A falha estrutural mais recorrente é CWE-59 (improper link resolution before file access, ou "link following"), que sugere vetores de escalada de privilégios ou acesso indevido a arquivos via symlinks — padrão que requer controles rigorosos em permissões de sistema de arquivos. O volume de 26 CVEs surgidas nos últimos 90 dias e a existência de 2 vulnerabilidades com PoC pública reforçam a necessidade de monitoramento contínuo e ciclos de patching ágeis.

CVE-2026-32694MEDIUMInsecure Direct Object Reference attack via predictable secret ID in JujuEPSS 0.4%CVE-2014-1422MEDIUMLocation service uses cached authorization even after revocationEPSS 0.4%CVE-2025-54287HIGHArbitrary File Read via Template Injection in Snapshot PatternsEPSS 0.4%CVE-2015-7946HIGHMTP service exposed during emergency dialerEPSS 0.4%CVE-2020-11934MEDIUMSandbox escape vulnerability via snapctl user-open (xdg-open)EPSS 0.4%CVE-2020-15704MEDIUMpppd arbitrary file read information disclosure vulnerabilityEPSS 0.4%CVE-2024-6107CRITICALDue to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region.EPSS 0.4%CVE-2018-10896MEDIUMThe default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh hoEPSS 0.4%CVE-2026-16033HIGHArbitrary file read+write on host via templates/ symlink in malicious imageEPSS 0.4%CVE-2025-54288MEDIUMSource Container Identification Vulnerability via cmdline Spoofing in devLXD ServerEPSS 0.4%CVE-2026-63295MEDIUMProject restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`EPSS 0.3%CVE-2020-8833MEDIUMApport race condition in crash report permissionsEPSS 0.3%CVE-2026-63297CRITICALCross-project instance copy bypasses target project restrictions via TOCTOU in config mergeEPSS 0.3%CVE-2020-16128LOWAptdaemon error messages disclosed file existence to unprivileged users via dbus propertiesEPSS 0.3%CVE-2025-54290MEDIUMProject Existence Disclosure via Error Handling in LXD Image ExportEPSS 0.3%CVE-2021-32556LOWapport get_modified_conffiles() function command injectionEPSS 0.3%CVE-2020-11931LOWUbuntu modifications to pulseaudio to provide snap security enforcement could be unloadedEPSS 0.3%CVE-2025-53512MEDIUMSensitive log retrieval in JujuEPSS 0.3%CVE-2021-32553HIGHapport read_file() function could follow maliciously constructed symbolic linksEPSS 0.3%CVE-2025-54292MEDIUMClient-Side Path Traversal in LXD-UIEPSS 0.3%