This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Snapd fixes 3 vulnerabilities
Snapd fixes 2 high-severity and 1 medium-severity vulnerability in version 2.76.1 [1]. Debian lists its releases (bullseye, bookworm, trixie and sid) as vulnerable, but has not yet provided security fixes [2][3][4]. Red Hat has not yet released fixes. Ubuntu releases and their fixed versions [1]: resolute - 2.76+ubuntu26.04.3 noble - 2.76+ubuntu24.04.1 jammy - 2.76+ubuntu22.04.1 focal - 2.67.1+20.04ubuntu1~esm3 bionic - 2.61.4ubuntu0.18.04.1+esm4 xenial - 2.61.4ubuntu0.16.04.1+esm4
An authenticated local attacker can bypass sandbox isolation and perform unauthorized operations inside the dedicated environment of a snap application [5][6].
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
More information:
- CVE-2026-15226 at cve.org, NVD
- CWE-250: Execution with Unnecessary Privileges at cwe.mitre.org
The vulnerability was publicly disclosed 21. 7. 2026.
An authenticated local attacker can, by exploiting a race condition in the creation of temporary directories in the snap-confine component, bypass security restrictions and escalate their privileges to root [7]. Details can be found at [8].
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2026-8933 at cve.org, NVD
- CWE-250: Execution with Unnecessary Privileges at cwe.mitre.org
The vulnerability was publicly disclosed 21. 7. 2026.
An authenticated local attacker can, via a snap application with "strict" confinement, interact without authorization with the systemd-userdbd service (if installed), resulting in the leak of complete user records (including hashed passwords) [9][10].
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
More information:
- CVE-2024-5300 at cve.org, NVD
- CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer at cwe.mitre.org
The vulnerability was publicly disclosed 21. 7. 2026.
Links
- [1] https://ubuntu.com/security/notices/USN-8579-1
- [2] https://security-tracker.debian.org/tracker/CVE-2026-15226
- [3] https://security-tracker.debian.org/tracker/CVE-2026-8933
- [4] https://security-tracker.debian.org/tracker/CVE-2024-5300
- [5] https://ubuntu.com/security/CVE-2026-15226
- [6] https://nvd.nist.gov/vuln/detail/CVE-2026-15226
- [7] https://ubuntu.com/security/CVE-2026-8933
- [8] https://www.openwall.com/lists/oss-security/2026/07/21/2
- [9] https://ubuntu.com/security/CVE-2024-5300
- [10] https://www.cve.org/CVERecord?id=CVE-2024-5300
By CESNET, z.s.p.o. Ondrej Pavlovič on 22. 7. 2026.