https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:52:15.097802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-12439 CVE-2019-12439 2026-10-08T09:52:15.150294+00:00

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.

 https://cve.radiocsirt.org/vuln/usn-8779-1 USN-8779-1 — bubblewrap vulnerabilities 2026-10-08T09:52:15.150348+00:00

Affected: Ubuntu:Pro:18.04:LTS: bubblewrap, Ubuntu:Pro:20.04:LTS: bubblewrap, Ubuntu:22.04:LTS: bubblewrap, Ubuntu:24.04:LTS: bubblewrap, Ubuntu:26.04:LTS: bubblewrap

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-12439)

It was discovered that Bubblewrap incorrectly handled certain symlinks during sandbox setup. A local attacker could possibly use this issue to create files outside of the sandbox. (CVE-2026-87766)