Ubuntu — Security Activity Report

Canonical Ubuntu (USN advisories)

Generated Jul 29, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗

CVE Disclosure Volume

Total all-time: 26,828 CVEs with Ubuntu advisories. Source: NVD CVE records joined with vendor advisory publish dates.

Severity Composition

↓ -17.4 pp

35.2% of Ubuntu's 26,828 CVEs are CRITICAL or HIGH severity. Industry median: 52.6%. Source: NVD CVSS v3.1.

CRITICAL 1,840 (6.9%)HIGH 7,610 (28.4%)MEDIUM 10,012 (37.3%)LOW 564 (2.1%)NONE 6,634 (24.7%)

CISA KEV Listings

↓ -0.6 pp

42 of 9,904 Ubuntu CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (0.4%). Industry median: 1.0%.

Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.

Vendor Patch Velocity

Insufficient data to publish a reliable patch-velocity metric for Ubuntu(sample size: 0, minimum required: 10).

Top Recurring Weakness Classes

Most-frequently mapped CWEs across Ubuntu's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.

CWE-476NULL Pointer Dereference1,197 CVEs
CWE-416Use After Free905 CVEs
CWE-787Out-of-bounds Write502 CVEs
CWE-125Out-of-bounds Read497 CVEs
CWE-401Missing Release of Memory after Effective Lifetime (Memory Leak)398 CVEs

Recent Security Advisories

Latest advisories published by Ubuntu, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.

USN-8620-1
CVE-2026-46274 CVE-2026-46275 CVE-2026-46294 CVE-2026-46303 CVE-2026-46304 CVE-2026-46307+106 more CVEsvendor source ↗
USN-8619-1
CVE-2026-46274 CVE-2026-46294 CVE-2026-46303 CVE-2026-46304 CVE-2026-46307 CVE-2026-46319+77 more CVEsvendor source ↗
USN-8618-1
CVE-2026-46274 CVE-2026-46275 CVE-2026-46294 CVE-2026-46303 CVE-2026-46304 CVE-2026-46307+199 more CVEsvendor source ↗
USN-8610-1
CVE-2025-71233 CVE-2025-71237 CVE-2026-23221 CVE-2026-23234 CVE-2026-23235 CVE-2026-23237+265 more CVEsvendor source ↗
USN-8609-1
CVE-2025-71233 CVE-2025-71237 CVE-2026-23221 CVE-2026-23234 CVE-2026-23235 CVE-2026-23237+364 more CVEsvendor source ↗
USN-8608-1
CVE-2026-23418 CVE-2026-23419 CVE-2026-23420 CVE-2026-23426 CVE-2026-23434 CVE-2026-23438+308 more CVEsvendor source ↗
USN-8607-1
CVE-2025-71233 CVE-2025-71237 CVE-2026-23221 CVE-2026-23234 CVE-2026-23235 CVE-2026-23237+363 more CVEsvendor source ↗
USN-8606-1
CVE-2025-71233 CVE-2025-71237 CVE-2026-23221 CVE-2026-23234 CVE-2026-23235 CVE-2026-23237+363 more CVEsvendor source ↗

Full advisory archive: /pulse/vendor-advisories →

Data sources & corrections

NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
Vendor security advisories (RHSA, USN, MSRC, GHSA, etc.) — published_at timestamps
MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings

Snapshot generated Jul 29, 2026. Industry medians refresh every 6 hours; raw vendor counts are queried live on each request.

Spot a factual error in this report?

Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.