Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Snapd
MEDIUM 6.6
In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image…
Snapd
HIGH 8.2
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. …
Ubuntu Desktop Provision
HIGH 7.8
An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.
Ubuntu Linux
HIGH 8.1
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals…
Ubuntu Advantage Desktop Daemon
MEDIUM 5.5
Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the tok…
Snapd
HIGH 8.8
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd wi…
Netplan
MEDIUM 6.5
netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.
Ubuntu Linux
HIGH 7.8
Apport does not disable python crash handler before entering chroot
Ubuntu Linux
MEDIUM 5.5
is_closing_session() allows users to consume RAM in the Apport process
Ubuntu Linux
MEDIUM 5.5
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
Ubuntu Linux
HIGH 7.1
is_closing_session() allows users to create arbitrary tcp dbus connections
Ubuntu Linux
MEDIUM 5.5
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
Ubuntu Linux
MEDIUM 5.5
is_closing_session() allows users to fill up apport.log
Subiquity
HIGH 8.4
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
Apport
HIGH 7.8
Apport can be tricked into connecting to arbitrary sockets as the root user
Apport
HIGH 7.8
There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary c…
Snapd
HIGH 8.1
The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap.…
Pebble
MEDIUM 6.5
It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged …
Lxd
MEDIUM 6.7
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Lxd
MEDIUM 6.7
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
Ubuntu Pipewire Pulse
MEDIUM 5.5
Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.
Snapd
HIGH 7.0
Race condition in snap-confine's must_mkdir_and_open_with_perms()
Ubuntu Linux
MEDIUM 6.4
A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their pr…
Ubuntu Linux
MEDIUM 6.3
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept H…
Subiquity
MEDIUM 5.5
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find has…
Ubuntu Linux
MEDIUM 5.3
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-s…
Accountsservice
HIGH 7.8
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message t…
Snapd
CRITICAL 10.0
Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause ar…
Landscape
HIGH 8.2
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and lea…
Landscape
HIGH 7.5
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.