Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how canonical compares to other vendors in security performance

View Risk Score →

Software

canonical ubuntu linux
2350
canonical lxd
21
canonical juju
15
canonical ubuntu
14
canonical snapd
11
canonical apport
8
canonical accountsservice
5
canonical apparmor
5
canonical multipass
4
canonical cloud-init
3
canonical linux kernel (azure)
3
canonical metal as a service
3
canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)
3
canonical incus
2
canonical linux kernel (nvidia tegra)
2
canonical linux kernel (nvidia)
2
canonical maas
2
canonical snapd snap-confine
2
canonical ubuntu core
2
canonical ubuntu linux kernel
2
canonical ubuntu touch
2
canonical unity-firefox-extension
2
canonical update-manager
2
canonical adsys
1
canonical c-kernel
1
canonical juju\/utils go
1
canonical libpam-modules
1
canonical linux kernel
1
canonical linux kernel (azure fips)
1
canonical linux kernel (gcp)
1
canonical linux kernel (intel iotg real-time)
1
canonical livepatch client
1
canonical ltsp display manager
1
canonical lxd (devlxd api)
1
canonical lxd-ui
1
canonical microceph
1
canonical microk8s
1
canonical multipass for macos
1
canonical netplan
1
canonical openssh
1
canonical pdfunite
1
canonical php5
1
canonical ppp
1
canonical screen-resolution-extra
1
canonical snap store
1
canonical snapd (snap-confine)
1
canonical snapd (snap-confine) on ubuntu desktop 24.04
1
canonical snapd (snap-confine) on ubuntu desktop 25.10
1
canonical snapd (snap-confine) on ubuntu desktop 26.04
1
canonical software-properties
1

Canonical LXDPath traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Risk 82
Severity
9.9
First published (updated )
CVE-2026-66898

Canonical LXDArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63293

Canonical LXDRoot RCE via image backup.yaml symlink

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63294

Canonical LXDProject restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Risk 22
Severity
4.3
First published (updated )
CVE-2026-63295

Canonical LXDProject restriction bypass via instance migration config override

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63296
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDCross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63297

Canonical LXDStorage volume cross-project move and snapshot restore bypass project disk limits

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63299

Canonical LXDCross-project cluster migration bypasses project restrictions via cluster notification flag

Risk 82
Severity
9.9
First published (updated )
CVE-2026-62420

oss-secLPE in snapd and other vulnerabilities

First published (updated )
https://seclists.org/oss-sec/2026/q3/192

oss-secLPE in snapd and other vulnerabilities

First published (updated )
https://seclists.org/oss-sec/2026/q3/191
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical snapd snap-confinesnapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates

Risk 62
Severity
8.4
First published (updated )
CVE-2026-15226

Canonical snapdAppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

Risk 33
Severity
5.6
First published (updated )
CVE-2024-5300

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs

Risk 29
Severity
5
First published (updated )
CVE-2026-12391

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

Risk 78
Severity
9
First published (updated )
CVE-2026-11386

Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line

Risk 24
Severity
5.5
EPSS
0.11%
First published (updated )
CVE-2026-9494
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDSSRF via image import from URL allows internal network probing by authenticated users

Risk 26
Severity
5
First published (updated )
CVE-2026-28385

LXD LXDLXD Snapshot Import Privilege Escalation Vulnerability

Risk 49
Severity
7.2
EPSS
0.37%
First published (updated )
CVE-2026-9640

Canonical LXDAuthenticated Denial of Service via Malicious Backup Tarball in LXD

Risk 27
Severity
6.5
EPSS
0.42%
First published (updated )
CVE-2026-9639

Canonical LXD (devLXD API)Broken Access Control in Canonical LXD DevLXD API

Risk 68
Severity
9.6
First published (updated )
CVE-2026-12411

Canonical ADSysCanonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment

Risk 79
Severity
9
First published (updated )
CVE-2026-12249
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical MicroCephMicroCeph path traversal issue in the remote-import API

Risk 47
Severity
5.1
First published (updated )
CVE-2026-10720

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47337

Ubuntu Ubuntu LinuxUse of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47336

Canonical Ubuntu LinuxNULL pointer dereference in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47335

Canonical Ubuntu LinuxDeadlock or kernel panic in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47334
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical Ubuntu LinuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47333

Canonical Ubuntu LinuxOut-of-bounds read in Ubuntu Linux AppArmor notification handling

Risk 32
Severity
5.5
First published (updated )
CVE-2026-47332

Canonical Ubuntu LinuxUse-after-free in Ubuntu Linux AppArmor notification handling

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47331

Canonical Ubuntu LinuxUse of uninitialized value in Ubuntu Linux AppArmor notification handling

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47330

Canonical Ubuntu LinuxIncorrect validation of field size in Ubuntu Linux AppArmor notification responses

Risk 18
Severity
3.3
First published (updated )
CVE-2026-47329
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203