Approved changes feed: RSS · Atom
cpe:2.3:a:canonical:ubuntu:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Canonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88) |
|---|---|
| Product | Ubuntu (67944565-014f-599b-a24f-08c2ad0fa1a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10037 |
vulnerable | 2026-07-29 00:20:51.801777 |
Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal
HIGH (8.8)
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.
Published: 2026-07-08T21:18:56.577Z
Updated: 2026-07-14T14:33:19.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10037 |
not_vulnerable | 2026-07-29 00:20:51.801718 |
Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal
HIGH (8.8)
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.
Published: 2026-07-08T21:18:56.577Z
Updated: 2026-07-14T14:33:19.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15480 |
vulnerable | 2026-06-08 07:06:36.298019 |
Senstive information disclosure was affecting ubuntu-desktop-provision
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
Published: 2026-04-09T15:02:14.066Z
Updated: 2026-04-10T13:57:17.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14551 |
vulnerable | 2026-06-08 07:06:34.675317 |
Senstive information disclosure was affecting subiquity
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.
Published: 2026-04-09T15:03:58.798Z
Updated: 2026-04-10T13:54:40.369Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.