CVE reports

The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section

Search CVEs

By Ubuntu release

Recent CVEs

CVE-2026-53492

High priority
Fixed

[Unknown description]

3 affected packages

containerd, containerd-app, containerd-stable

CVE-2026-53489

High priority
Fixed

[Unknown description]

3 affected packages

containerd, containerd-app, containerd-stable

CVE-2026-53488

High priority

Some fixes available 12 of 13

[Unknown description]

3 affected packages

containerd, containerd-app, containerd-stable

CVE-2026-50195

High priority
Fixed

[Unknown description]

3 affected packages

containerd, containerd-app, containerd-stable

CVE-2026-10846

High priority

Some fixes available 6 of 7

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the...

1 affected package

ldns

Resources

Join the discussion

Ubuntu Pro

Up to 15 years of security coverage for Ubuntu and your full stack of open-source applications and toolchains.

Get Ubuntu Pro 30-day free trial

From our blog