Vulnerabilities

Search by TI id or any alias (CVE, GHSA), vendor, product or CWE.

Filters

Reset all

Threatist priority CRITICAL 0 HIGH 0 MEDIUM 0 LOW 2

Signals Exploited in the wild (KEV) 0 Patch available 2 No fix listed 0 Has CVE 2

Fix status Fixed 2 Partial 0 Will not fix 0 Deferred 0 No fix listed 0

Attack vector Network 0 Adjacent network 0 Local 2 Physical 0

Requirements No authentication 0 No user interaction 2

Product

Products as named in CPE, with their records.

Published Last 7 days Last 30 days Last 12 months Any time

Weakness (CWE) CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition 1 CWE-379 Creation of Temporary File in Directory with Insecure Permissions 1 CWE-59 Improper Link Resolution Before File Access 1

1 selected

2 records

Sort

Advisory: Canonical Apport — USN-4315-2 × Clear all filters

TI-2020-07090 CVE-2020-8833 · GHSA-w9g5-3qgc-xmgx

Apport race condition in crash report permissions

Priority LOW 25

Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity.

CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2020-04-22 · Fixed in 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14 +1 CWE-367

TI-2020-07088 CVE-2020-8831 · GHSA-33w2-prhc-2q89

World writable root owned lock file created in user controllable location

Priority LOW 30

Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory.

CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00651 · Published 2020-04-22 · Fixed in 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14 +1 CWE-379

THREATIST.IO

Vulnerability intelligence for security teams and AI agents.

Vulnerabilities Vendors Exploited (KEV) API & MCP Newsletter Privacy policy Terms of use

Newsletter Vulnerability intelligence in your inbox Subscribe

© 2026 Threatist.io · X (@threatist)Data: CVE Program, NVD, CISA KEV, FIRST EPSS, GitHub Advisory Database and Red Hat security data (both CC BY 4.0), Microsoft Security Response Center. This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

We would like to use Google Analytics cookies to see how the site is used. They are set only if you accept. Privacy policy