Vulnerabilidades em Canonical

171 resultados
Análise Vexday

O portfólio de vulnerabilidades da Canonical soma 121 CVEs catalogadas, com 8 classificadas como críticas e nenhuma entrada no catálogo KEV da CISA — taxa de exploração ativa abaixo da média geral do catálogo. Apesar desse perfil relativamente contido, o CVE-2019-7304 chama atenção por registrar o maior score EPSS observado no conjunto (0,6108), indicando probabilidade elevada de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente. A falha estrutural mais recorrente é CWE-59 (improper link resolution before file access, ou "link following"), que sugere vetores de escalada de privilégios ou acesso indevido a arquivos via symlinks — padrão que requer controles rigorosos em permissões de sistema de arquivos. O volume de 26 CVEs surgidas nos últimos 90 dias e a existência de 2 vulnerabilidades com PoC pública reforçam a necessidade de monitoramento contínuo e ciclos de patching ágeis.

CVE-2019-7304HIGHLocal privilege escalation via snapd socketEPSS 61.1%CVE-2023-2640HIGHOn Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unpEPSS 15.2%CVE-2023-32629HIGHLocal privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_EPSS 8.3%CVE-2019-7303MEDIUMSnapd seccomp filter TIOCSTI ioctl bypassEPSS 3.7%CVE-2019-7305MEDIUMeXtplorer exposes /usr and /etc/extplorer over HTTPEPSS 1.8%CVE-2019-7306MEDIUMByobu apport hook uploads user's ~/.screenrcEPSS 1.8%CVE-2026-3888HIGHLocal Privilege Escalation in snapdEPSS 1.4%CVE-2013-1054MEDIUMPossible remote DOS in WebAppsEPSS 1.3%CVE-2013-1055MEDIUMPotential DoS through abuse of rate limit in libunity-webapps for FirefoxEPSS 1.3%CVE-2026-63294CRITICALRoot RCE via image backup.yaml symlinkEPSS 0.9%CVE-2026-48750CRITICALIncus has an arbitrary file write on host via `exec-output` symlink in crafted imageEPSS 0.8%CVE-2025-5054MEDIUMRace Condition in Canonical ApportEPSS 0.8%CVE-2026-48749CRITICALIncus has an arbitrary file read+write on host via rootfs/ symlink in malicious imageEPSS 0.8%CVE-2026-48752CRITICALIncus has arbitrary file read+write on host via templates/ symlink in malicious imageEPSS 0.8%CVE-2026-48755CRITICALIncus has an argument injection in backup compression algorithm leading to AFW and ACEEPSS 0.8%CVE-2026-48769CRITICALIncus has an arbitrary file write on its client due to trusted image hashEPSS 0.8%CVE-2025-53513HIGHZip slip vulnerability in JujuEPSS 0.8%CVE-2026-66897CRITICALInstance template path traversal allows arbitrary host file write as rootEPSS 0.7%CVE-2020-27348MEDIUMsnapcraft may build snaps with incorrect LD_LIBRARY_PATHEPSS 0.7%CVE-2026-28384CRITICALAuthenticated RCE via unsanitized compression_algorithmEPSS 0.7%