[NEW] [high] snapd: Multiple Vulnerabilities

highCVE-2024-5300 CVE-2026-15226 CVE-2026-8933

A local attacker can exploit multiple vulnerabilities in Ubuntu Linux and Canonical Snap to disclose information, gain root privileges, and bypass security measures.

CSIRTS triage

vendor: Canonical product: snapd Information disclosure Privilege escalation Authentication bypass

What: Multiple vulnerabilities can be exploited by a local attacker to disclose information, gain root privileges, and bypass security measures.
Who is affected: Deployments of Ubuntu Linux using Canonical Snap are affected.
Urgency: Remediation is high urgency due to the potential for privilege escalation and the severity of the vulnerabilities.
Action: Apply the latest updates to snapd as soon as possible.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch snapd

Get an email when a new snapd advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-07-22
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2469

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2024-53000.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-152260.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
Low exploitation riskCVE-2026-89330.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2024-5300	coverage & exploitation status	NVD · CVE.org
CVE-2026-15226	coverage & exploitation status	NVD · CVE.org
CVE-2026-8933	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for snapd

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-8933: A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core comp…nvd · 2026-07-21
highCVE-2026-15226: A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execu…nvd · 2026-07-21
mediumCVE-2024-5300: An access control bypass and information disclosure vulnerability exists in the base AppArmor s…nvd · 2026-07-21
unknownUSN-8579-1: snapd vulnerabilitiesubuntu · 2026-07-21