What’s Vulnerable › Products

Canonical Ltd. snapd vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Canonical Ltd. snapd version is affected

Latest Canonical Ltd. snapd vulnerabilities

• CVE-2024-29069 — snapd will follow archived symlinks when unpacking a filesystem (CVSS 7.3)
• CVE-2024-29068 — snapd non-regular file indefinite blocking read (CVSS 6.6)
• CVE-2024-1724 — snapd allows $HOME/bin symlink (CVSS 8.2)
• CVE-2020-27352 — (CVSS 8.8)
• CVE-2024-5138 — (CVSS 8.1)
• CVE-2022-3328 — (CVSS 7.0)
• CVE-2023-1523 — (CVSS 10.0)
• CVE-2021-44731 — snapd could be made to escalate privileges and run programs as administrator (CVSS 7.8)
• CVE-2021-44730 — snapd could be made to escalate privileges and run programs as administrator (CVSS 8.8)
• CVE-2021-4120 — snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths (CVSS 7.8)
• CVE-2021-3155 — snapd created ~/snap with too-wide permissions (CVSS 5.5)
• CVE-2020-11933 — local snapd exploit through cloud-init (CVSS 6.8)
• CVE-2019-11503 — (CVSS 7.5)
• CVE-2019-11502 — (CVSS 7.5)
• CVE-2019-7304 — Local privilege escalation via snapd socket (CVSS 9.8)
• CVE-2019-7303 — Snapd seccomp filter TIOCSTI ioctl bypass (CVSS 7.5)