Canonical Subiquity — known CVE vulnerabilities

Every CVE whose affected-product data names Canonical Subiquity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-0555 — CVSS 8.4 (high): Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
• CVE-2023-5182 — CVSS 5.5 (medium): Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information…
• CVE-2020-11932 — CVSS 2.3 (low): It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.