Known vulnerabilities in PackageKit

Software: PackageKit
Software CPE: cpe:2.3:a:richard_hughes:packagekit:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PackageKit PackageKit is affected by 12 known vulnerabilities: 1 medium, 11 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148900 - Missing Authorization
CVE-2026-55752
CWE-862 Low
No
No
1.4.0 10.09.2026 SB2026090759
#VU148899 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
1.4.0 10.09.2026 SB2026090759
#VU148898 - Improper Authorization
CWE-285 Low
No
No
1.4.0 10.09.2026 SB2026090759
#VU148897 - Argument Injection or Modification
CWE-88 Low
No
No
1.4.0 10.09.2026 SB2026090759
#VU148896 - Incorrect Authorization
CVE-2026-19816
CWE-863 Low
No
No
1.4.0 10.09.2026 SB2026090759
SB2026091202
SB2026091203
#VU147252 - Missing Authorization
CWE-862 Low
No
No
1.4.0 07.09.2026 SB2026090759
#VU147251 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
1.4.0 07.09.2026 SB2026090759
#VU126937 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-41651
CWE-367 Low
Available
No
1.3.5 23.04.2026 SB2026042354
SB20260424303
SB2026042911
and 17 more
#VU126936 - Improper Access Control
CWE-284 Low
No
No
1.3.5 23.04.2026 SB2026042354
#VU87936 - Use After Free
CVE-2024-0217
CWE-416 Low
No
No
1.2.7 01.04.2024 SB2024040140
SB2024040142
SB2024041150
#VU12144 - Improper Authentication
CVE-2018-1106
CWE-287 Low
No
No
- 25.04.2018 SB2018042503
SB2018042504
SB2018042514
and 3 more
#VU41796 - Permissions, Privileges, and Access Controls
CVE-2013-1764
CWE-264 Low
No
No
- 16.04.2014 SB2014041607