Vulnerabilities > Canonical > Snapcraft > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-12-04 CVE-2020-27348 Uncontrolled Search Path Element vulnerability in Canonical Snapcraft and Ubuntu Linux
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar.
local
low complexity
canonical CWE-427
6.8