Vulnerabilities (CVE)

Filtered by vendor Canonical Subscribe
Filtered by product Ubuntu Desktop Provision
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-15480 1 Canonical 1 Ubuntu Desktop Provision 2026-04-17 N/A 9.1 CRITICAL
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
CVE-2024-6714 2 Canonical, Linux 2 Ubuntu Desktop Provision, Linux Kernel 2025-08-26 N/A 8.8 HIGH
An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.