Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

529 results · Clear filters · Feed

  • Critical max 9.8
    USN-2964-1 5 CVEs 1 exploited

    openjdk-7 vulnerabilities

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrar…

    first May 5, 2016
  • Critical max 9.8
    USN-2963-1 6 CVEs 1 exploited

    openjdk-8 vulnerabilities

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrar…

    first May 5, 2016
  • High max 8.8
    USN-2380-1 2 CVEs 1 exploited

    bash vulnerabilities

    Michal Zalewski discovered that Bash incorrectly handled parsing certain function definitions. If an attacker were able to create an environment variable containing a function definition with a very specific name, these issues could possibly be used to bypass…

    first Oct 9, 2014
  • Critical max 9.8
    USN-2363-2 1 CVE 1 exploited

    bash vulnerability

    USN-2363-1 fixed a vulnerability in Bash. Due to a build issue, the patch for CVE-2014-7169 didn't get properly applied in the Ubuntu 14.04 LTS package. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tavis Ormand…

    first Sep 26, 2014
  • Critical max 9.8
    USN-2363-1 1 CVE 1 exploited

    bash vulnerability

    Tavis Ormandy discovered that the security fix for Bash included in USN-2362-1 was incomplete. An attacker could use this issue to bypass certain environment restrictions. (CVE-2014-7169)

    first Sep 25, 2014
  • Critical max 9.8
    USN-2362-1 1 CVE 1 exploited

    bash vulnerability

    Stephane Chazelas discovered that Bash incorrectly handled trailing code in function definitions. An attacker could use this issue to bypass environment restrictions, such as SSH forced command environments.

    first Sep 24, 2014
  • Critical max 10.0
    USN-7443-2 1 CVE 1 exploited

    erlang vulnerability

    USN-7443-1 fixed a vulnerability in Erlang. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled …

    first Apr 23, 2025
  • Critical max 9.8
    USN-7789-2 184 CVEs 1 exploited

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Oct 8, 2025
  • Critical max 9.8
    USN-7770-1 184 CVEs 1 exploited

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Sep 24, 2025