Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-22 18:07 UTC
Importiert: 2026-07-29 08:18 UTC
CVSS: 7.8
Quelle-ID: thn_global
uid_hash: 38331e34e8de07bd99d79bc007a86690b9a535d24a628062290bc640b96e00e8

The Hacker News

Inhalt

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment.

The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), impacts default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The disclosure comes as

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-8933	HIGH	7.8	HIGH	7.8			2026-07-21

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste