Vulnerabilities in packagekit

4 results

Vexday analysis

PackageKit apresenta footprint de risco mínimo com apenas 1 CVE registrado na base e nenhuma exploração ativa documentada. A vulnerabilidade não é crítica e não foi publicada recentemente, indicando baixa prioridade de remediação imediata.

CVE-2020-16121LOWPackageKit error messages leak presence and mimetype of files to unprivileged usersEPSS 0.5%CVE-2026-41651HIGHPackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootEPSS 0.5%CVE-2011-2515—PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packagEPSS 0.4%CVE-2020-16122HIGHPackagekit's apt backend lets user install untrusted local packagesEPSS 0.3%