Security
فارسی
All products

Red Hat Enterprise Linux 7/flatpak

Red Hat · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
flatpak: Flatpak: Local privilege escalation via crafted architecture nameCVE-2026-92162 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual consoleCVE-2023-28100 Red Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: Metadata with ANSI control codes can cause misleading terminal outputCVE-2023-28101 Red Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: flatpak: flatpak-system-helper cross-user CancelPull orphans another user's ongoing pullCVE-2026-96283 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported
flatpak: flatpak: Arbitrary read-access to files in the system-helper context via OCI symlink followingCVE-2026-96284 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported
flatpak: flatpak: Extension metadata path traversal file existence oracleCVE-2026-96282 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported
flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimesCVE-2026-96281 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systemsCVE-2026-96280 Red Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: flatpak: Arbitrary write in host context via flatpak build-initCVE-2026-96276 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: flatpak: Arbitrary write access as root via extra-data extractionCVE-2026-96275 Red Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: Flatpak: TOCTOU race condition allows symlink redirectionCVE-2026-76925 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: Flatpak: Arbitrary code execution via missing symlink protectionCVE-2026-90616 Red Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: Flatpak: Low integrity or availability impact via symlink manipulationCVE-2026-96807 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writerCVE-2026-96808 Red Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: flatpak: World-writable temporary child repositories in system-helper cache pathCVE-2026-97026 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported
flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/binCVE-2026-97023 Red Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etcCVE-2026-97024 Red Hat Enterprise Linux 7/flatpak Red Hat High No fix reported
flatpak: flatpak: World-readable OCI authentication token in system-helper cache pathCVE-2026-97025 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported
flatpak: flatpak: Sandboxed app can signal unsandboxed processes in the same process groupCVE-2026-97029 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Medium No fix reported
flatpak: flatpak: Denial of service via unsanitized keys in exported Desktop Entry / D-Bus Service filesCVE-2026-97027 Red Hat Enterprise Linux 10/flatpakRed Hat Enterprise Linux 7/flatpak Red Hat Low No fix reported