Skip to content
OpenAdvisories
High WID-SEC-2026-2469 3 CVEs

snapd: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Ubuntu Linux und Canonical Snap ausnutzen, um Informationen offenzulegen, Root-Rechte zu erlangen und Sicherheitsmaßnahmen zu umgehen.

Product

Ubuntu Linux ist die Linux Distribution des Herstellers Canonical.
Snap (auch bekannt als Snappy) ist ein Softwareverteilungssystem und eine Paketverwaltung für Linux.

Vulnerabilities 3

  • High 8.4

    snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates

    A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process ope…

  • High 7.8
    CVE-2026-8933 Public exploit

    snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

    A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-c…

  • Medium 5.6

    AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

    An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd (inherited via ) inadvertently permit st…

Revision history

  1. #1

    Initiale Fassung

References