Vendor
Canonical
- CVEs tracked · all time
- 6
- in CISA KEV · all time
- 0
- article · since 11 Sep
- 1
- articles · all time
- 8
One article in the last 45 daysThe latest: SecurityOnline, Tue 29 Sep, 02:28 UTC.See the full timeline
Products: LXD, Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and 5 more
LXDUbuntu 14.04 LTSUbuntu 16.04 LTSUbuntu 18.04 LTSUbuntu 20.04 LTSUbuntu 22.04 LTSUbuntu 24.04 LTSUbuntu 26.04 LTSubuntu-pro-client (ubuntu-advantage-tools)
CVEs
6 CVEsCVE-2026-87799Arbitrary file write on LXD host via symlink in migration streamCVSS9.9Critical–Not in KEV0.4%EPSS1article
CVE-2026-85185Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as rootCVSS9.6Critical–Not in KEV0.4%EPSS1article
CVE-2026-8933snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment SetupCVSS7.8High–Not in KEV0.2%EPSS3articles
CVE-2026-11386ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code ExecutionCVSS9.0Critical–Not in KEV0.5%EPSS1article
- Critical LXD Flaws Let Users Write to Hosts as RootSecurityOnline
- Ubuntu Snap race condition CVE-2026-8933 enables root takeoverSecurity Affairs
- Ubuntu snap-confine Vulnerability Enables Local Root AccessInfosecurity
- snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on UbuntuSecurityOnline
- Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root PrivilegesSecurityOnline
- New Ubuntu Flaw Enables Local Attackers to Gain Root AccessInfosecurity
- CVE-2026-3888: Ubuntu Desktop 24.04+ vulnerable to Root exploitSecurity Affairs
- Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing ExploitThe Hacker News · first in our coverage