CVE-2022-1242

Apport can be tricked into connecting to arbitrary sockets as the root user

CVE-2021-3899

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.