CVE-2025-15480
Critical · 9.1CVSS
9.1
EPSS
0.3%
Published
Apr 9, 2026
CISA due date
—
The record
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79727 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-1258
- CVE-2026-80239 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-1258
- CVE-2026-66432 Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions. CWE-1258
- CVE-2025-14551 In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash… CWE-1258
- CVE-2026-26948 Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G… CWE-1258
- CVE-2024-36912 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus… CWE-1258
- CVE-2024-36913 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus… CWE-1258