Vulnerabilidades em canonical

160 resultados
Análise Vexday

Canonical possui 3 vulnerabilidades registradas na base Vexday, todas de severidade abaixo de crítica, sem exploração ativa documentada. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, indicando que o risco atual é estável e não apresenta exposição recente imediata. A fraqueza dominante (CWE-532 - Log Insertion) reflete problemas de integridade de logs, com menor impacto comparado a vulnerabilidades de execução remota.

CVE-2019-7304HIGHLocal privilege escalation via snapd socketEPSS 60.8%CVE-2023-2640HIGHOn Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unpEPSS 15.2%CVE-2023-32629HIGHLocal privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_EPSS 9.1%CVE-2019-7303MEDIUMSnapd seccomp filter TIOCSTI ioctl bypassEPSS 3.7%CVE-2019-7305MEDIUMeXtplorer exposes /usr and /etc/extplorer over HTTPEPSS 1.8%CVE-2019-7306MEDIUMByobu apport hook uploads user's ~/.screenrcEPSS 1.7%CVE-2013-1054MEDIUMPossible remote DOS in WebAppsEPSS 1.3%CVE-2013-1055MEDIUMPotential DoS through abuse of rate limit in libunity-webapps for FirefoxEPSS 1.3%CVE-2026-63294CRITICALRoot RCE via image backup.yaml symlinkEPSS 0.9%CVE-2026-28384CRITICALAuthenticated RCE via unsanitized compression_algorithmEPSS 0.9%CVE-2025-5054MEDIUMRace Condition in Canonical ApportEPSS 0.8%CVE-2025-53513HIGHZip slip vulnerability in JujuEPSS 0.7%CVE-2026-66897CRITICALInstance template path traversal allows arbitrary host file write as rootEPSS 0.7%CVE-2020-27348MEDIUMsnapcraft may build snaps with incorrect LD_LIBRARY_PATHEPSS 0.7%CVE-2026-63298HIGHLXD arbitrary lxc.conf directive injection via NVIDIA instance configurationEPSS 0.7%CVE-2026-34178CRITICALImporting a crafted backup leads to project restriction bypassEPSS 0.7%CVE-2020-8831MEDIUMWorld writable root owned lock file created in user controllable locationEPSS 0.7%CVE-2025-0928HIGHArbitrary executable upload via authenticated endpointEPSS 0.6%CVE-2026-9640HIGHLXD Snapshot Import Privilege Escalation VulnerabilityEPSS 0.6%CVE-2012-0955MEDIUMsoftware-properties incorrectly validated TLS certificatesEPSS 0.6%