Canonical vulnerabilities46 known to be exploited.
Canonical has 4,249 published vulnerabilities across 57 products in our catalogue. 46 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Ubuntu Linux, with 4,170. If you run Canonical software, patch the exploited flaws first.
The most recent Canonical flaw added to the known-exploited list is CVE-2022-0492, on 2 June 2026. We keep watching the known-exploited list.
Which Canonical products have the most vulnerabilities?
Ubuntu Linux leads with 4,170 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Canonical vulnerabilities are being exploited?
46 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Linux Kernel Improper Authentication Vulnerability
Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
- 7.8Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- 7.8Linux Kernel Integer Overflow Vulnerability
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their...
- 9.3Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability.
- 8.4ImageMagick Improper Input Validation Vulnerability
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders.
- 5.3Linux Kernel Use-After-Free Vulnerability
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
- 7.8GNU C Library Buffer Overflow Vulnerability
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- 9.8Apache Tomcat Remote Code Execution Vulnerability
Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports.
Which Canonical flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via...
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- 99%CVE-2011-3192High
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses...
- 97%
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a...
- 97%
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect...
- 97%CVE-2006-3747High
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to...
- 96%
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and...
- 95%CVE-2006-3918Medium
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an...
All Canonical products we track.
50 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Ubuntu Linuxubuntu_linux4,170 vulnerabilities76 versions
- Apportapport16 vulnerabilities212 versions
- Snapdsnapd16 vulnerabilities275 versions
- Lxdlxd12 vulnerabilities170 versions
- Cloud-Initcloud-init9 vulnerabilities92 versions
- Jujujuju6 vulnerabilities201 versions
- Metal As a Servicemetal_as_a_service5 vulnerabilities62 versions
- Accountsserviceaccountsservice4 vulnerabilities11 versions
- Ubuntu Coreubuntu_core4 vulnerabilities1 version
- Ubuntu Touchubuntu_touch4 vulnerabilities1 version
- Authdauthd3 vulnerabilities13 versions
- Landscapelandscape3 vulnerabilities9 versions
- Multipassmultipass3 vulnerabilities35 versions
- Subiquitysubiquity3 vulnerabilities81 versions
- Acpi-Supportacpi-support2 vulnerabilities3 versions
- Lxcfslxcfs2 vulnerabilities1 version
- Maasmaas2 vulnerabilities62 versions
- Software-Propertiessoftware-properties2 vulnerabilities3 versions
- Ubuntuubuntu2 vulnerabilities1 version
- Unity-Firefox-Extensionunity-firefox-extension2 vulnerabilities1 version
- Add-Apt-Repositoryadd-apt-repository1 vulnerability8 versions
- Anbox Cloudanbox_cloud1 vulnerability7 versions
- Apparmorapparmor1 vulnerability11 versions
- Apt-Xapian-Indexapt-xapian-index1 vulnerability68 versions
This directory lists the 50 Canonical products with at least one tracked version, of 57 in our catalogue.
Running Canonical? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
- Matched to
- Canonical on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 4,249 published vulnerabilities across 57 products and 1,842 versions from Canonical. The most recent Canonical flaw added to the known-exploited list is CVE-2022-0492, on 2 June 2026.
46 Canonical vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2022-0492, CVE-2026-31431 and CVE-2018-14634. The full list is on this page.
Ubuntu Linux, with 4,170 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Canonical products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.