Ubuntu 18.04

🟠 High   ⏱ 15–60 min  Last verified: 31 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8269-1 Related CVEs: CVE-2026-24401 CVE-2026-34933 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2023-38469 CVE-2023-38470 CVE-2023-38471  +7 more Upstream summary: It is discovered that Avahi incorrectly handled crafted input. A remote attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 24 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-2 Related CVEs: CVE-2025-15367 CVE-2025-15366 CVE-2026-0865 https://bugs.launchpad.net/bugs/2143706 CVE-2025-15282 CVE-2026-0672 CVE-2025-13837 CVE-2025-11468  +12 more Upstream summary: USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 […]

🟠 High   ⏱ 15–60 min  Last verified: 23 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8071-2 Related CVEs: CVE-2026-2781 CVE-2022-3479 CVE-2023-0767 CVE-2022-22747 CVE-2022-34480 CVE-2020-25648 CVE-2021-43527 CVE-2020-12403  +12 more Upstream summary: USN-8071-1 fixed a vulnerability in nss. This update provides the corresponding fix for Ubuntu 14.04 […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8234-1 Related CVEs: CVE-2026-41205 CVE-2022-40023 Upstream summary: It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8226-2 Related CVEs: CVE-2026-31431 Upstream summary: USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 […]

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0964 CVE-2026-0967 CVE-2026-0966 CVE-2026-0968 CVE-2025-8277 CVE-2025-8114  +10 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8022-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2025-59375 CVE-2024-50602 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2022-43680  +12 more Upstream summary: It was discovered that Expat incorrectly handled memory when parsing certain XML files. An attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8001-1 Related CVEs: CVE-2026-21933 CVE-2026-21932 CVE-2026-21945 CVE-2026-21925 CVE-2025-53066 CVE-2025-53057 CVE-2025-30761 CVE-2025-30754  +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 11 would establish RMI TCP endpoint […]

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8035-1 Related CVEs: CVE-2026-25646 CVE-2026-22801 CVE-2025-66293 CVE-2026-22695 CVE-2025-64720 CVE-2025-64506 CVE-2025-64505 CVE-2025-65018  +3 more Upstream summary: It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial […]

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8281-1 Related CVEs: CVE-2026-31431 CVE-2026-31504 CVE-2026-43033 CVE-2026-43077 CVE-2026-43078 CVE-2024-27388 CVE-2024-46816 CVE-2024-49938  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]