Ubuntu 24.04

🟠 High   ⏱ 15–60 min  Last verified: 31 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8155-1 Related CVEs: CVE-2026-28387 CVE-2026-2673 CVE-2026-31790 CVE-2026-28388 CVE-2026-28389 CVE-2026-31789 CVE-2026-28390 CVE-2026-22796  +12 more Upstream summary: Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the expected preferred key exchange group when used […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8287-1 Related CVEs: CVE-2026-40354 Upstream summary: It was discovered that XDG Desktop Portal incorrectly handled trashing files. A local attacker could possibly use this issue to delete arbitrary files on […]

🟠 High   ⏱ 15–60 min  Last verified: 28 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8223-1 Related CVEs: CVE-2024-38357 CVE-2024-38356 CVE-2024-42008 CVE-2024-42010 CVE-2026-26079 CVE-2026-25916 CVE-2019-15237 CVE-2025-68461  +2 more Upstream summary: It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8234-1 Related CVEs: CVE-2026-41205 Upstream summary: It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain sensitive […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2025-47287 CVE-2023-28370 CVE-2024-52804 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8000-1 Related CVEs: CVE-2026-21932 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-30749 CVE-2025-30761  +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8196-1 Related CVEs: CVE-2026-35329 CVE-2026-35331 CVE-2026-35330 CVE-2026-35332 CVE-2026-35328 CVE-2026-35333 CVE-2026-35334 CVE-2026-25075  +1 more Upstream summary: Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A remote attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8233-1 Related CVEs: CVE-2026-27135 CVE-2024-28182 Upstream summary: Andrew MacPherson discovered that nghttp2 did not properly validate internal state when the session termination API was called. A remote attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 25 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8020-1 Related CVEs: CVE-2026-1539 CVE-2026-1536 CVE-2026-1467 CVE-2025-12105 CVE-2025-4969 CVE-2025-32914 CVE-2025-4945 CVE-2025-32907  +12 more Upstream summary: It was discovered that libsoup did not correctly handle certain URL-decoded input, which could allow […]

🟠 High   ⏱ 15–60 min  Last verified: 25 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8294-1 Related CVEs: CVE-2026-6638 CVE-2026-6476 CVE-2026-6477 CVE-2026-6479 CVE-2026-6475 CVE-2026-6474 CVE-2026-6478 CVE-2026-6472  +12 more Upstream summary: It was discovered that PostgreSQL did not correctly enforce authorization for CREATE TYPE. An attacker […]