Поиск уязвимостей
Количество 9
Количество 9
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy ver ...
RLSA-2026:90523
Important: xdg-dbus-proxy security update
RLSA-2026:90522
Important: xdg-dbus-proxy security update
ELSA-2026-90523
ELSA-2026-90523: xdg-dbus-proxy security update (IMPORTANT)
ELSA-2026-90522
ELSA-2026-90522: xdg-dbus-proxy security update (IMPORTANT)
ALT-PU-2026-16581
ALT-PU-2026-16581: package `xdg-dbus-proxy` update to version 0.1.9-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail. | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy ver ... | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:90523 Important: xdg-dbus-proxy security update | 0% Низкий | 11 дней назад | |
| RLSA-2026:90522 Important: xdg-dbus-proxy security update | 0% Низкий | 11 дней назад | |
| ELSA-2026-90523 ELSA-2026-90523: xdg-dbus-proxy security update (IMPORTANT) | 0% Низкий | 14 дней назад | |
| ELSA-2026-90522 ELSA-2026-90522: xdg-dbus-proxy security update (IMPORTANT) | 0% Низкий | 14 дней назад | |
| ALT-PU-2026-16581 ALT-PU-2026-16581: package `xdg-dbus-proxy` update to version 0.1.9-alt1 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу