Search CVE reports


Toggle filters

1 – 10 of 15 results


CVE-2026-34079

Medium priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34078

Medium priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-42472

Medium priority

Some fixes available 3 of 5

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-32462

Medium priority

Some fixes available 4 of 8

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Fixed Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-28101

Medium priority
Needs evaluation

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-28100

Medium priority
Needs evaluation

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX`...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2022-21682

Low priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-43860

Medium priority
Needs evaluation

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-41133

Medium priority
Fixed

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland,...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Not affected Fixed Fixed
Show less packages

CVE-2021-21381

Medium priority
Fixed

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used...

1 affected package

flatpak

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
flatpak Fixed Fixed
Show less packages