Canonical

CPE vendor key: canonical · 87 CVEs published in the last 24 months.

CVEs (365 d)

▼ -1 vs prior 30d

Avg CVSS (365 d)

7.07

over 57 CVEs

Avg EPSS pct (365 d)

0.27

higher = more likely exploited

KEV hit rate (365 d)

1.8%

1 of 57 added to CISA KEV

LLM-credited CVEs

none detected

Monthly CVE volume — last 24 months

Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

lxd

ubuntu_linux

juju

apport

multipass

cloud-init

accountsservice

linux-bluefield

authd

juju\/utils

Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

Distinct CVEs assigned each weakness.

Known exploited, all time (47)

Published	CVE
2026-04-22	CVE-2026-31431
2025-06-30	CVE-2025-32463
2024-01-08	CVE-2022-2586
2023-10-03	CVE-2023-4911
2023-03-22	CVE-2023-0386
2022-03-03	CVE-2022-0492
2022-02-18	CVE-2022-0543
2022-02-16	CVE-2021-3560
2022-01-28	CVE-2021-4034
2021-04-17	CVE-2021-3493
2020-08-17	CVE-2020-1472
2020-04-30	CVE-2020-11651
2020-04-30	CVE-2020-11652
2020-03-02	CVE-2019-17026
2020-01-29	CVE-2020-7247
2019-10-28	CVE-2019-11043
2019-10-11	CVE-2019-2215
2019-09-27	CVE-2019-16928
2019-07-17	CVE-2019-13272
2019-06-05	CVE-2019-10149
2019-04-08	CVE-2019-0211
2018-09-25	CVE-2018-14634
2018-02-08	CVE-2018-6789
2017-10-04	CVE-2017-12617
2017-04-06	CVE-2016-8735
2016-11-10	CVE-2016-5195
2016-05-05	CVE-2016-3714
2016-05-05	CVE-2016-3715
2016-05-05	CVE-2016-3718
2016-04-21	CVE-2016-3427
2016-03-29	CVE-2016-1646
2015-08-08	CVE-2015-4495
2015-07-16	CVE-2015-2590
2014-09-25	CVE-2014-7169
2014-09-24	CVE-2014-6271
2014-06-07	CVE-2014-3153
2014-05-07	CVE-2014-0196
2014-04-07	CVE-2014-0160
2013-06-26	CVE-2013-1690
2013-05-16	CVE-2013-1675
2013-04-17	CVE-2013-2423
2013-01-10	CVE-2013-0422
2011-10-19	CVE-2011-3544
2010-12-14	CVE-2010-4344
2010-12-14	CVE-2010-4345
2010-12-06	CVE-2010-3904
2010-04-01	CVE-2010-0840

Attributed by CPE rather than by CISA's vendor name, so it includes CVEs filed under another vendor whose affected-product list names this one — shared library code is the usual reason. Broader, and noisier, than the name-matched card above on purpose.

Generated 16 October 2026 12:22 UTC .