packagekit project records
8 published records for vendor packagekit project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-209 Generation of Error Message Containing Sensitive Information1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-269 Improper Privilege Management1
- CWE-287 Improper Authentication1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2026-41651Proof of concept | PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootpackagekit project · packagekit · CWE-367 | High8.8 | — | 0.4% | Apr 22, 2026 |
31Monitor | CVE-2020-16122No exploit | Packagekit's apt backend lets user install untrusted local packagespackagekit project · packagekit · CWE-269 | High7.8 | — | 0.3% | Nov 7, 2020 |
22Monitor | CVE-2018-1106No exploit | An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signepackagekit project · packagekit · CWE-287 | Medium5.5 | — | 0.3% | Apr 23, 2018 |
21Monitor | CVE-2011-2515No exploit | PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packagpackagekit project · packagekit · CWE-732 | Medium5.3 | — | 0.3% | Nov 27, 2019 |
13Monitor | CVE-2020-16121No exploit | PackageKit error messages leak presence and mimetype of files to unprivileged userspackagekit project · packagekit · CWE-209 | Low3.3 | — | 0.4% | Nov 7, 2020 |
13Monitor | CVE-2022-0987No exploit | A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files.packagekit project · packagekit · CWE-200 | Low3.3 | — | 0.2% | Jun 28, 2022 |
13Monitor | CVE-2024-0217No exploit | Packagekitd: use-after-free in idle function callbackpackagekit project · packagekit · CWE-416 | Low3.3 | — | 0.2% | Jan 3, 2024 |
8Monitor | CVE-2013-1764No exploit | The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.packagekit project · packagekit · CWE-264 | Low2.1 | — | 0.3% | Apr 16, 2014 |
- CVE-2026-4165135Monitor
PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root
HighCVSS 8.8Proof of conceptEPSS 0%packagekit project · packagekitApr 22, 2026
- CVE-2020-1612231Monitor
Packagekit's apt backend lets user install untrusted local packages
HighCVSS 7.8No exploitEPSS 0%packagekit project · packagekitNov 7, 2020
- CVE-2018-110622Monitor
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signe
MediumCVSS 5.5No exploitEPSS 0%packagekit project · packagekitApr 23, 2018
- CVE-2011-251521Monitor
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packag
MediumCVSS 5.3No exploitEPSS 0%packagekit project · packagekitNov 27, 2019
- CVE-2020-1612113Monitor
PackageKit error messages leak presence and mimetype of files to unprivileged users
LowCVSS 3.3No exploitEPSS 0%packagekit project · packagekitNov 7, 2020
- CVE-2022-098713Monitor
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files.
LowCVSS 3.3No exploitEPSS 0%packagekit project · packagekitJun 28, 2022
- CVE-2024-021713Monitor
Packagekitd: use-after-free in idle function callback
LowCVSS 3.3No exploitEPSS 0%packagekit project · packagekitJan 3, 2024
- CVE-2013-17648Monitor
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.
LowCVSS 2.1No exploitEPSS 0%packagekit project · packagekitApr 16, 2014