- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, apport recorded 3 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of apport and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86692apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keysCVE-2026-84410apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processingCVE-2026-77113Path Traversal Vulnerability in apport-unpackCVE-2025-5467Ubuntu Apport Insecure File Permissions VulnerabilityCVE-2025-5054Race Condition in Canonical Apport| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86692apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keys | Exploitation statusNot confirmed | FixYes |
| SeverityMedium |
CVE-2026-84410apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processing | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityHigh |
|---|
CVE-2026-77113Path Traversal Vulnerability in apport-unpack | Exploitation statusNot exploited | FixYes | Published08/20/2026 | SeverityMedium |
|---|
CVE-2025-5467Ubuntu Apport Insecure File Permissions Vulnerability | Exploitation statusActively exploited | FixYes | Published12/10/2025 | SeverityLow |
|---|
CVE-2025-5054Race Condition in Canonical Apport | Exploitation statusActively exploited | FixYes | Published05/30/2025 | SeverityMedium |
|---|
CVE-2021-3710Apport info disclosure via path traversal bug in read_file | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityMedium |
|---|
CVE-2021-3709Apport file permission bypass through emacs byte compilation errors | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityMedium |
|---|
CVE-2021-32557apport process_report() arbitrary file write | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityMedium |
|---|
CVE-2021-32556apport get_modified_conffiles() function command injection | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityLow |
|---|
CVE-2021-32555apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32554apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32553apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32552apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32551apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32550apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32549apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32548apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-32547apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
|---|
CVE-2021-25684apport can be stalled by reading a FIFO | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
|---|
CVE-2021-25683apport improperly parses /proc/pid/stat | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
|---|
CVE-2021-25682apport improperly parses /proc/pid/status | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
|---|
CVE-2020-15702TOCTOU in apport | Exploitation statusNot confirmed | FixYes | Published08/06/2020 | SeverityHigh |
|---|
CVE-2020-15701Unhandled exception in apport | Exploitation statusNot confirmed | FixYes | Published08/06/2020 | SeverityMedium |
|---|
CVE-2019-15790Apport reads PID files with elevated privileges | Exploitation statusNot confirmed | FixYes | Published04/27/2020 | SeverityLow |
|---|
CVE-2020-8833Apport race condition in crash report permissions | Exploitation statusNot confirmed | FixYes | Published04/22/2020 | SeverityMedium |
|---|
CVE-2020-8831World writable root owned lock file created in user controllable location | Exploitation statusNot confirmed | FixYes | Published04/22/2020 | SeverityMedium |
|---|
CVE-2019-11485apport created lock file in wrong directory | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityLow |
|---|
CVE-2019-11483CVE-2019-11483 | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityHigh |
|---|
CVE-2019-11482Race condition between reading current working directory and writing a core dump | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityMedium |
|---|
CVE-2019-11481Apport reads arbitrary files if ~/.config/apport/settings is a symlink | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityLow |
|---|
30 Results | Page 1 of 1