Vulnerabilidades em Canonical

150 resultados
Análise Vexday

O portfólio de vulnerabilidades da Canonical soma 121 CVEs catalogadas, com 8 classificadas como críticas e nenhuma entrada no catálogo KEV da CISA — taxa de exploração ativa abaixo da média geral do catálogo. Apesar desse perfil relativamente contido, o CVE-2019-7304 chama atenção por registrar o maior score EPSS observado no conjunto (0,6108), indicando probabilidade elevada de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente. A falha estrutural mais recorrente é CWE-59 (improper link resolution before file access, ou "link following"), que sugere vetores de escalada de privilégios ou acesso indevido a arquivos via symlinks — padrão que requer controles rigorosos em permissões de sistema de arquivos. O volume de 26 CVEs surgidas nos últimos 90 dias e a existência de 2 vulnerabilidades com PoC pública reforçam a necessidade de monitoramento contínuo e ciclos de patching ágeis.

CVE-2024-6174HIGHWhen a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init dEPSS 0.2%CVE-2021-3747HIGHMacOS version of Multipass incorrect owner for application directoryEPSS 0.2%CVE-2023-5536MEDIUMA feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalateEPSS 0.2%CVE-2026-5774MEDIUMJuju API Server Denial of Service and Authentication Replay via Unsynchronized Token MapEPSS 0.2%CVE-2026-63297CRITICALCross-project instance copy bypasses target project restrictions via TOCTOU in config mergeEPSS 0.2%CVE-2026-77113MEDIUMPath Traversal Vulnerability in apport-unpackEPSS 0.2%CVE-2026-63295MEDIUMProject restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`EPSS 0.2%CVE-2026-32691MEDIUMTiming ownership claim attack on new external back-end secretsEPSS 0.2%CVE-2019-11482MEDIUMRace condition between reading current working directory and writing a core dumpEPSS 0.2%CVE-2024-29069MEDIUMsnapd will follow archived symlinks when unpacking a filesystemEPSS 0.2%CVE-2020-11933HIGHlocal snapd exploit through cloud-initEPSS 0.2%CVE-2026-8933HIGHsnap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment SetupEPSS 0.2%CVE-2024-29068MEDIUMsnapd non-regular file indefinite blocking readEPSS 0.2%CVE-2025-54289HIGHPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations APIEPSS 0.2%CVE-2026-12391MEDIUMubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logsEPSS 0.2%CVE-2024-41129MEDIUMThe ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI commandEPSS 0.2%CVE-2013-1053MEDIUMInsecure crypto for storing passwordsEPSS 0.2%CVE-2026-10037HIGHSandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portalEPSS 0.2%CVE-2025-5467LOWUbuntu Apport Insecure File Permissions VulnerabilityEPSS 0.2%CVE-2026-32692HIGHUnauthorized update of out-of-scope Vault secretsEPSS 0.2%