Vulnerabilidades en Canonical
171 resultadosCVE-2025-5199HIGHLPE on Multipass for macOSEPSS 0.2%CVE-2026-32692HIGHUnauthorized update of out-of-scope Vault secretsEPSS 0.2%CVE-2025-24375MEDIUMMySQL K8s charm could leak credentials for root-level user `serverconfig`EPSS 0.2%CVE-2025-13350HIGHUse-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernelEPSS 0.2%CVE-2025-6224MEDIUMKey leakage in juju/utils certificatesEPSS 0.2%CVE-2025-6966MEDIUMNull-pointer dereference in python-apt TagSection.keys()EPSS 0.2%CVE-2026-3351LOWAuthorization Bypass in LXD GET /1.0/certificates EndpointEPSS 0.2%CVE-2026-9494MEDIUMubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command LineEPSS 0.1%CVE-2026-12249CRITICALCanonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-EnrollmentEPSS 0.1%CVE-2024-11584MEDIUMcloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, EPSS 0.1%CVE-2026-1237LOWVulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to upEPSS 0.1%CVE-2026-49237HIGHLocal Privilege Escalation in Canonical MultipassEPSS 0.1%CVE-2026-61897HIGHaccountsservice: incomplete privilege drop when running Ubuntu-specific language helper scriptsEPSS 0.1%CVE-2024-5300MEDIUMAppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbdEPSS 0.1%CVE-2025-54286HIGHCSRF Vulnerability When Using Client Certificate Authentication with the LXD-UIEPSS 0.1%CVE-2026-6369MEDIUMExposed Session Token in canonical-livepatch client snapEPSS 0.1%CVE-2026-47331HIGHUse-after-free in Ubuntu Linux AppArmor notification handlingEPSS 0.1%CVE-2026-102631MEDIUMauthd: Account takeover via username fallback in identity matching after IdP email reassignmentEPSS 0.1%CVE-2026-6970HIGHauthd Denial of Service and Local Privilege EscalationEPSS 0.1%CVE-2026-102371MEDIUMwsl-pro-service: Ubuntu Pro token exposed via process command-line argumentsEPSS 0.1%