Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xdg Desktop Portal MEDIUM 6.3
CVE-2026-40354

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack o…

Fix: 1.20.4+
Fix from $1,600 2026-04-11
Flatpak Builder MEDIUM 6.3
CVE-2026-39977

flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user d…

Fix: 1.4.8+
Fix from $1,600 2026-04-09
Flatpak HIGH 7.5
CVE-2026-34079

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without pro…

Fix: 1.16.4+
Fix from $1,950 2026-04-07
Flatpak CRITICAL 10.0
CVE-2026-34078

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options…

Fix: after 1.16.3
Fix from $2,300 2026-04-07
Xdg Dbus Proxy MEDIUM 5.5
CVE-2026-34080

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The…

Fix: 0.1.7+
Fix from $1,600 2026-04-07
Flatpak MEDIUM 6.5
CVE-2023-28100

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.…

Fix: 1.10.8 / 1.12.8+
Fix from $1,600 2023-03-16
Flatpak CRITICAL 9.0
CVE-2019-10063

Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-522…

Fix: 1.0.8 / 1.2.4+
Fix from $2,300 2019-03-26