Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium4.0The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.CVE-2026-110452 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 14, 2026
Low1.9It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposi…CVE-2025-5467 · canonical · apport · CVE.org · FIRST EPSS · NIST NVD · UbuntuEPSS 0.2%Dec 10, 2025