Advisories · Technology

Canonical snapd.

Every CVE that names Canonical snapd among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-11934 CVE record

CVSS 5.9 Medium

Sandbox escape vulnerability via snapctl user-open (xdg-open)
- Canonical snapd
Not analysed yet 29 Jul 2020
CVE-2020-11933 CVE record

CVSS 7.3 High

local snapd exploit through cloud-init
- Canonical snapd
- Canonical core
- CWE-264
Not analysed yet 29 Jul 2020
CVE-2019-7304 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Local privilege escalation via snapd socket
- Canonical snapd
Not analysed yet 23 Apr 2019
CVE-2019-7303 CVE record

CVSS 5.7 Medium

Snapd seccomp filter TIOCSTI ioctl bypass
- Canonical snapd
- CWE-628
Not analysed yet 23 Apr 2019