--- title: CVEs description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/cves --- # Search CVE reports CVE ID or description contains: Search --- [Toggle filters](https://ubuntu.com/security/cves#drawer) 1 – 10 of 82172 results Detailed view Sort by: Date Newest Oldest --- ## [CVE-2026-55467](https://ubuntu.com/security/CVE-2026-55467) Medium priority Needs evaluation 2 affected packages libcupsfilters, cups-filters --- ## [CVE-2026-108577](https://ubuntu.com/security/CVE-2026-108577) Medium priority Needs evaluation A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc\_add\_gchord of the file src/load\_abc.cpp of the component ABC Music Format Parser. This manipulation causes... 1 affected package libmodplug --- ## [CVE-2026-108553](https://ubuntu.com/security/CVE-2026-108553) High priority Needs evaluation OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a... 1 affected package openrefine --- ## [CVE-2026-108063](https://ubuntu.com/security/CVE-2026-108063) Low priority Needs evaluation A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that... 1 affected package libhangul --- ## [CVE-2026-107794](https://ubuntu.com/security/CVE-2026-107794) Medium priority Needs evaluation ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av\_extend( av, len-1 ). On an empty list, this undeflows, and av\_extend will allocate an array with... 1 affected package libextutils-typemaps-default-perl --- ## [CVE-2026-107570](https://ubuntu.com/security/CVE-2026-107570) Medium priority Needs evaluation heap OOB write in convert\_file\_from\_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template. 1 affected package mutt --- ## [CVE-2026-107565](https://ubuntu.com/security/CVE-2026-107565) Low priority Needs evaluation A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap... 1 affected package luksmeta --- ## [CVE-2026-107373](https://ubuntu.com/security/CVE-2026-107373) Low priority Needs evaluation ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T\_STD\_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV\_nolen($arg), SvCUR($arg) ) However, evaluation... 1 affected package libextutils-typemaps-default-perl --- ## [CVE-2026-102554](https://ubuntu.com/security/CVE-2026-102554) Medium priority Needs evaluation Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing... 1 affected package guava-libraries --- ## [CVE-2025-55480](https://ubuntu.com/security/CVE-2025-55480) Medium priority Needs evaluation 2 affected packages cups-filters, libcupsfilters 1. *Previous page* 2. [1](https://ubuntu.com/security/cves?format=md&offset=0) 3. [2](https://ubuntu.com/security/cves?format=md&offset=10) 4. [3](https://ubuntu.com/security/cves?format=md&offset=20) 5. [4](https://ubuntu.com/security/cves?format=md&offset=30) 6. [5](https://ubuntu.com/security/cves?format=md&offset=40) 7. [*Next page*](https://ubuntu.com/security/cves?format=md&offset=10 "Next page") [Export to JSON](https://ubuntu.com/security/cves) Results by page: 10 20