Vulnerabilidades em Canonical

171 resultados
Análise Vexday

O portfólio de vulnerabilidades da Canonical soma 121 CVEs catalogadas, com 8 classificadas como críticas e nenhuma entrada no catálogo KEV da CISA — taxa de exploração ativa abaixo da média geral do catálogo. Apesar desse perfil relativamente contido, o CVE-2019-7304 chama atenção por registrar o maior score EPSS observado no conjunto (0,6108), indicando probabilidade elevada de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente. A falha estrutural mais recorrente é CWE-59 (improper link resolution before file access, ou "link following"), que sugere vetores de escalada de privilégios ou acesso indevido a arquivos via symlinks — padrão que requer controles rigorosos em permissões de sistema de arquivos. O volume de 26 CVEs surgidas nos últimos 90 dias e a existência de 2 vulnerabilidades com PoC pública reforçam a necessidade de monitoramento contínuo e ciclos de patching ágeis.

CVE-2025-0928HIGHArbitrary executable upload via authenticated endpointEPSS 0.7%CVE-2026-63298HIGHLXD arbitrary lxc.conf directive injection via NVIDIA instance configurationEPSS 0.7%CVE-2026-48751CRITICALIncus has a restricted project bypass leading to arbitrary command executionEPSS 0.7%CVE-2020-8831MEDIUMWorld writable root owned lock file created in user controllable locationEPSS 0.7%CVE-2026-9640HIGHLXD Snapshot Import Privilege Escalation VulnerabilityEPSS 0.6%CVE-2012-0955MEDIUMsoftware-properties incorrectly validated TLS certificatesEPSS 0.6%CVE-2020-11932LOWSubiquity server installer logged LUKS full disk encryption passwordEPSS 0.6%CVE-2025-31479HIGHcanonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception outputEPSS 0.6%CVE-2025-54293HIGHPath Traversal in LXD Instance Log File RetrievalEPSS 0.6%CVE-2026-66898CRITICALPath traversal via unvalidated instance name in backup tarball restore enables root file write / RCEEPSS 0.6%CVE-2026-63293CRITICALArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootEPSS 0.6%CVE-2026-63299HIGHStorage volume cross-project move and snapshot restore bypass project disk limitsEPSS 0.6%CVE-2021-25684HIGHapport can be stalled by reading a FIFOEPSS 0.6%CVE-2026-9639MEDIUMAuthenticated Denial of Service via Malicious Backup Tarball in LXDEPSS 0.5%CVE-2026-62420CRITICALCross-project cluster migration bypasses project restrictions via cluster notification flagEPSS 0.5%CVE-2026-63300CRITICALCross-project instance move bypasses all project restrictions allowing host command executionEPSS 0.5%CVE-2026-85526CRITICALPath traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXDEPSS 0.5%CVE-2026-11386CRITICALubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code ExecutionEPSS 0.5%CVE-2019-15790LOWApport reads PID files with elevated privilegesEPSS 0.5%CVE-2019-15796MEDIUMpython-apt downloads from untrusted sourcesEPSS 0.5%