Ubuntu 24.04

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7958-1 Related CVEs: CVE-2024-8372 CVE-2019-14863 CVE-2025-0716 CVE-2023-26117 CVE-2024-8373 CVE-2025-2336 CVE-2024-21490 CVE-2023-26116  +2 more Upstream summary: It was discovered that AngularJS did not properly sanitize certain `xlink:href` attributes. A remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8278-1 Related CVEs: CVE-2024-50004 CVE-2024-58096 CVE-2024-58097 CVE-2025-37926 CVE-2025-38201 CVE-2025-38591 CVE-2025-40039 CVE-2025-40082  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8232-1 Related CVEs: CVE-2026-6907 CVE-2026-5766 CVE-2026-35192 CVE-2026-4277 CVE-2026-33034 CVE-2026-33033 CVE-2026-3902 CVE-2026-4292  +12 more Upstream summary: It was discovered that Django did not vary cached response headers on cookies when sessions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7485-1 Related CVEs: CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 Upstream summary: It was discovered that LibRaw could be made to read out of bounds. An attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8113-1 Related CVEs: CVE-2025-61144 CVE-2025-61143 CVE-2025-8961 CVE-2025-9165 CVE-2025-9900 CVE-2025-8177 CVE-2025-8851 CVE-2025-8534  +3 more Upstream summary: It was discovered that LibTIFF did not properly handle memory when processing certain images. An […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8193-1 Related CVEs: CVE-2026-4878 CVE-2025-1390 Upstream summary: Ali Raza discovered that libcap incorrectly handled file capability updates. A local attacker could possibly use this issue to inject or strip capabilities […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8104-1 Related CVEs: CVE-2026-27205 Upstream summary: Shourya Jaiswal discovered that Flask did not correctly mark certain web responses as user-specific. A remote attacker could possibly use this issue to obtain […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7446-1 Related CVEs: CVE-2025-31492 Upstream summary: It was discovered that mod_auth_openidc incorrectly handled certain POST requests. An attacker could possibly use this issue to obtain sensitive information. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 24 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8258-1 Related CVEs: CVE-2024-36347 CVE-2024-57795 CVE-2025-22022 CVE-2025-22111 CVE-2025-38022 CVE-2025-38234 CVE-2025-40164 CVE-2025-40325  +12 more Upstream summary: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8249-1 Related CVEs: CVE-2026-2219 CVE-2025-6297 Upstream summary: Yashashree Gund discovered that the dpkg dpkg-deb tool incorrectly handled certain zstd-compressed .deb archives. If a user or automated system were tricked into […]