Qualys Security Advisory - snap-confine Privilege Escalation

Qualys has discovered a local root privilege escalation vulnerability in set-capabilities versions of snap-confine...

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933

A local privilege escalation affecting snap-confine (used by Canonical snapd) configured with set-capabilities. The flaw lies in how privilege boundaries/security sandboxes are initialized when running under limited ambient capabilities, allowing an unprivileged local user to bypass restrictions ...

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

EUVD-2026-46262

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933 snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933 snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

UBUNTU-CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-8933: Execution with Unnecessary Privileges

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

PT-2026-61956

Name of the Vulnerable Software and Affected Versions snap-confine affected versions not specified Description A local privilege escalation issue exists in snap-confine, a core component used by Canonical snapd to create secure execution environments for snap applications. The flaw occurs in...