UBUNTU-CVE-2026-18704

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an...

ROOT-OS-UBUNTU-2204-CVE-2025-8194 CVE-2025-8194 in python3.11 - Patched by Root

Root has patched CVE-2025-8194 in the python3.11 package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-42919 CVE-2022-42919 in python3.11 - Patched by Root

Root has patched CVE-2022-42919 in the python3.11 package for Root:Ubuntu:22.04. Multiple fixed versions available...

UBUNTU-CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

ROOT-OS-UBUNTU-2204-CVE-2024-7055 CVE-2024-7055 in ffmpeg - Patched by Root

Root has patched CVE-2024-7055 in the ffmpeg package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-2236 CVE-2024-2236 in libgcrypt20 - Patched by Root

Root has patched CVE-2024-2236 in the libgcrypt20 package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-66418 CVE-2025-66418 in python3-pip - Patched by Root

Root has patched CVE-2025-66418 in the python3-pip package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-21441 CVE-2026-21441 in python3-pip - Patched by Root

Root has patched CVE-2026-21441 in the python3-pip package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-35195 CVE-2024-35195 in python3-pip - Patched by Root

Root has patched CVE-2024-35195 in the python3-pip package for Root:Ubuntu:22.04. Multiple fixed versions available...

UBUNTU-CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation...

ROOT-OS-UBUNTU-2204-CVE-2025-46835 CVE-2025-46835 in git - Patched by Root

Root has patched CVE-2025-46835 in the git package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Ubuntu:22.04. Multiple fixed versions available...

UBUNTU-CVE-2026-15060

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

UBUNTU-CVE-2026-16742

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

UBUNTU-CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

UBUNTU-CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

UBUNTU-CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...