Known vulnerabilities in Snapd

Vendor: snapcore
Software: Snapd
Software CPE: cpe:2.3:a:snapcore:snapd:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Snapd Snapd is affected by 14 known vulnerabilities: 2 medium, 12 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95152 - Security Features
CVE-2024-1724
CWE-254 Medium
No
No
2.62 01.08.2024 SB2024080147
SB2024080148
SB2025011319
#VU95151 - Improper input validation
CVE-2024-29068
CWE-20 Medium
No
No
2.62 01.08.2024 SB2024080147
SB2024080148
SB2025011319
#VU95150 - UNIX Symbolic Link (Symlink) Following
CVE-2024-29069
CWE-61 Low
No
No
2.62 01.08.2024 SB2024080147
SB2024080148
SB2025011319
#VU76639 - Permissions, Privileges, and Access Controls
CVE-2023-1523
CWE-264 Low
No
No
2.59.5 30.05.2023 SB2023053033
SB2023053103
#VU69767 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-3328
CWE-362 Low
No
No
2.57.6 01.12.2022 SB2022120103
SB2022120111
SB2022120204
and 5 more
#VU63646 - Incorrect Default Permissions
CVE-2021-3155
CWE-276 Low
No
No
2.54.3 25.05.2022 SB2022022122
SB2022021727
SB2022021815
and 2 more
#VU60744 - Improper input validation
CVE-2021-4120
CWE-20 Low
No
No
2.54.3 21.02.2022 SB2022022122
SB2022021727
SB2022021815
and 7 more
#VU60743 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-44731
CWE-362 Low
Available
No
2.54.3 21.02.2022 SB2022022122
SB2022022123
SB2022021727
and 8 more
#VU60742 - UNIX Hard Link
CVE-2021-44730
CWE-62 Low
No
No
2.54.3 21.02.2022 SB2022022122
SB2022022123
SB2022021727
and 8 more
#VU24726 - Permissions, Privileges, and Access Controls
CVE-2017-14178
CWE-264 Low
No
No
2.29.3 29.01.2020 SB2018020208
#VU18376 - Permissions, Privileges, and Access Controls
CVE-2019-11502
CWE-264 Low
No
No
2.38 30.04.2019 SB2019043002
#VU18375 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-11503
CWE-362 Low
No
No
2.39 30.04.2019 SB2019043003
SB2019071211
SB2019071212
and 1 more
#VU18064 - Permissions, Privileges, and Access Controls
CVE-2019-7303
CWE-264 Low
No
No
2.37.4 24.03.2019 SB2019032401
SB2019032110
#VU17656 - Permissions, Privileges, and Access Controls
CVE-2019-7304
CWE-264 Low
Available
No
2.37.1 13.02.2019 SB2019012518
SB2019021815