Canonical
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Instance template path traversal allows arbitrary host file write as root
Path Traversal Vulnerability in apport-unpack
Arbitrary file read+write on host via templates/ symlink in malicious image
Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
Root RCE via image backup.yaml symlink
Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
Project restriction bypass via instance migration config override
Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration
Monitor Canonical in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.