CVE reports
The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed.
Canonical also produces Open Vulnerability and Assessment Language (OVAL) data, which is machine-readable, to enable auditing for CVEs and to determine whether a particular patch, via an Ubuntu Security Notice (USN), is appropriate for the local system.
Search
Recent CVEs affecting Ubuntu
ID | Priority | Package |
14.04 ESM
|
16.04 ESM
|
18.04 ESM
|
20.04 LTS
|
22.04 LTS
|
23.10
|
24.04 LTS
|
---|---|---|---|---|---|---|---|---|---|
CVE-2024-3839 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-3838 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-3837 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-3834 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-3833 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-3832 |
medium
|
chromium-browser | — | — | — |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
— |
CVE-2024-2961 |
medium
|
glibc | — |
Needs triage
|
Needs triage
|
Released
|
Released
|
Released
|
— |
eglibc |
Needs triage
|
— | — |
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
CVE-2024-3865 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3864 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3863 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3862 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3861 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3860 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3859 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3858 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3857 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3856 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3855 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3854 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
CVE-2024-3853 |
medium
|
firefox | — | — | — |
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
thunderbird | — | — | — |
Needed
|
Needed
|
Needed
|
— | ||
mozjs38 | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
mozjs52 | — | — |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs68 | — | — | — |
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
mozjs78 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs91 | — | — | — |
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
mozjs102 | — | — | — |
Does not exist
|
Needs triage
|
Needs triage
|
— |