When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the…

snapd 2.54.2 did not properly validate the location of the snap-confine binary

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path

The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap

snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via…

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd…

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host

In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap

Race condition in snap-confine's must_mkdir_and_open_with_perms()