Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 10/flatpak
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
flatpak: Flatpak: Local privilege escalation via crafted architecture name
CVE-2026-92162
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
High
No fix reported
Not recorded
flatpak: sandbox escape via RequestBackground portal
CVE-2024-32462
Red Hat Enterprise Linux 10/flatpak
Red Hat
High
No fix reported
Not recorded
flatpak: flatpak: flatpak-system-helper cross-user CancelPull orphans another user's ongoing pull
CVE-2026-96283
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
flatpak: flatpak: Arbitrary read-access to files in the system-helper context via OCI symlink following
CVE-2026-96284
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
flatpak: flatpak: Extension metadata path traversal file existence oracle
CVE-2026-96282
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimes
CVE-2026-96281
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: flatpak: Arbitrary write in host context via flatpak build-init
CVE-2026-96276
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: flatpak: Path traversal issue in OCI archive extraction via hardlinks
CVE-2026-96279
Red Hat Enterprise Linux 10/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: Flatpak: TOCTOU race condition allows symlink redirection
CVE-2026-76925
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: Flatpak: Low integrity or availability impact via symlink manipulation
CVE-2026-96807
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: flatpak: World-writable temporary child repositories in system-helper cache path
CVE-2026-97026
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
flatpak: flatpak: World-readable OCI authentication token in system-helper cache path
CVE-2026-97025
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
flatpak: flatpak: Sandboxed app can signal unsandboxed processes in the same process group
CVE-2026-97029
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Medium
No fix reported
Not recorded
flatpak: flatpak: Denial of service via unsanitized keys in exported Desktop Entry / D-Bus Service files
CVE-2026-97027
Red Hat Enterprise Linux 10/flatpak
Red Hat Enterprise Linux 7/flatpak
Red Hat
Low
No fix reported
Not recorded
