What’s Vulnerable › Products

PackageKit vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PackageKit version is affected

Latest PackageKit vulnerabilities

• CVE-2026-41651 — PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root (CVSS 8.8)
• CVE-2024-0217 — Packagekitd: use-after-free in idle function callback (CVSS 3.3)
• CVE-2022-0987 — (CVSS 3.3)
• CVE-2020-16122 — Packagekit's apt backend lets user install untrusted local packages (CVSS 7.8)
• CVE-2020-16121 — PackageKit error messages leak presence and mimetype of files to unprivileged users (CVSS 3.3)
• CVE-2011-2515 — (CVSS 5.3)
• CVE-2018-1106 — (CVSS 5.5)
• CVE-2013-1764 — (CVSS 2.1)