Ubports vulnerabilities
6 vulnerabilities
Known vulnerabilities in Ubports products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Lomiri Download Manager2 vulnerabilities
- Ubuntu Touch2 vulnerabilities
- Unity82 vulnerabilities
CVE-2026-96425debianlomiri-download-manager+1
EPSS score0.10%
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBusCVE-2026-96424debianlomiri-download-manager+1EPSS score0.11%
Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBusCVE-2015-7946canonicalunity8 (ubuntu)+2EPSS score0.37%
Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.CVE-2016-1573ubportsunity8+1EPSS score0.43%
Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.CVE-2014-1423signond_projectsignond+2EPSS score0.84%
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oauth tokens for other applications, exposing sensitive information.CVE-2022-40297ubportsubuntu_touchEPSS score0.47%
UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's password. NOTE: a third party states "The described attack cannot be executed as demonstrated.