https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T17:49:53.648629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-4120 CVE-2021-4120 — snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths 2026-10-14T17:49:53.664966+00:00

Affected: Canonical Ltd. snapd

snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layout declarations and hence escape strict snap confinement. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

 https://cve.radiocsirt.org/vuln/usn-5292-1 USN-5292-1 — snapd vulnerabilities 2026-10-14T17:49:53.665068+00:00

Affected: Ubuntu:18.04:LTS: snapd, Ubuntu:20.04:LTS: snapd

James Troup discovered that snap did not properly manage the permissions for the snap directories. A local attacker could possibly use this issue to expose sensitive information. (CVE-2021-3155)

Ian Johnson discovered that snapd did not properly validate content interfaces and layout paths. A local attacker could possibly use this issue to inject arbitrary AppArmor policy rules, resulting in a bypass of intended access restrictions. (CVE-2021-4120)

The Qualys Research Team discovered that snapd did not properly validate the location of the snap-confine binary. A local attacker could possibly use this issue to execute other arbitrary binaries and escalate privileges. (CVE-2021-44730)

The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing a private mount namespace for a snap. A local attacker could possibly use this issue to escalate privileges and execute arbitrary code. (CVE-2021-44731)