Three New Ubuntu Snap Vulnerabilities Made Public - One Dates Back To Ubuntu 16.04 LTS

Written by Michael Larabel in Ubuntu on 21 July 2026 at 02:02 PM EDT. 39 Comments
UBUNTU
Canonical today disclosed three new Snap security vulnerabilities affecting snapd. Two are rated high impact vulnerabilities while the third is considered medium but covers all Ubuntu releases of the past decade going back to Ubuntu 16.04 LTS.

CVE-2026-8933 was uncovered by Qualys and allows a local attacker to escalate privileges. CVE-2026-8933 impacts Ubuntu LTS releases going back to 22.04 and is rated high with its CVSS3.1 score.

The other "high" vulnerability is CVE-2026-15226 that allows a local attacker to escape Snap confinement from confined root to unconfined root.

Ubuntu 16.04 LTS


The third one that affects Ubuntu LTS releases back to 16.04 is CVE-2024-5300 and allows sandboxed applications to access hashed user passwords.

More details on these latest Ubuntu Snap security issues can be found via the Ubuntu Discourse.
39 Comments
Related News
Ubuntu Touch Making Progress Toward Ubuntu 26.04, Vulkan & App Updates
Ubuntu To Provide Virtualization HWE Stack For Ubuntu 26.04 LTS
Ubuntu Touch 24.04-2.0 Released With Support For Notches & Rounded Corners
Ubuntu Linux Looking To Get Rid Of /etc/debian_version Historical Artifact
Canonical Makes The "Enterprise Store" Official For Offline/Air-Gapped Ubuntu Usage
Ubuntu Kernel Team Warns Of Temporary AMD GPU Performance Regression Up To 42x
About The Author

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week
Valve Sponsors Work Bringing Open-Source RADV Driver To Windows
"KVM Chainsaw" Expected To Hit Linux 7.3 For Dealing With God Data Structure
The First Open-Source Firmware Released For Modern AMD Ryzen AM5 Platform
Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Halted
AMD P-State Linux Driver Patches Can Boost 1%-Low FPS Gaming Performance By 31%
Kiwi Menu Continues Bringing macOS Vibes To GNOME
Starling: A New Linux Desktop Written In Swift, Own Wayland Compositor & Written With AI
DRM Format Modifiers For Old AMD GPUs Coming With Linux 7.3: Thanks Valve