2026 - Page 1373 of 1450

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8255-1 Related CVEs: CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 CVE-2023-53421 CVE-2023-53520 CVE-2023-53662 CVE-2023-54207  +12 more Upstream summary: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8230-1 Related CVEs: CVE-2026-33748 CVE-2026-33747 CVE-2024-29018 CVE-2024-41110 Upstream summary: It was discovered that BuildKit, contained within Docker, incorrectly handled file path validation when processing frontend API messages. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8259-1 Related CVEs: CVE-2026-27622 CVE-2026-34380 CVE-2026-34588 Upstream summary: Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0967 CVE-2026-0968 CVE-2025-8277 CVE-2026-0964 CVE-2026-0966 CVE-2025-8114  +7 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8194-1 Related CVEs: CVE-2026-33347 CVE-2025-46734 CVE-2026-30838 Upstream summary: It was discovered that league/commonmark did not properly restrict unsafe attributes when the Attributes extension was enabled. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8233-1 Related CVEs: CVE-2026-27135 CVE-2019-9511 CVE-2019-9513 CVE-2023-44487 CVE-2024-28182 Upstream summary: Andrew MacPherson discovered that nghttp2 did not properly validate internal state when the session termination API was called. A remote […]