Canonical Ubuntu vulnerabilities

3 CVEs affecting Canonical Ubuntu, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10037, published 2026-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-1424, published 2014-11-24. Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days. apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."
CVE-2014-1949, published 2015-01-16. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
CVE-2026-10037, published 2026-07-08. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is…