F
Flatpak
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 42 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2017 to present
42
Total CVEs
21
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
42/100
medium
🆕 10Fresh (<7d)📈 12 in Last 30 Days
Severity Distribution
Critical
5High
16Medium
6Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
7Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
5
2
Input Validation
3
3
Race Condition
2
Most Affected Products
1. Flatpak Flatpak55
2. Debian Debian Linux13
3. debian/flatpak11
4. redhat/flatpak9
5. Fedoraproject Fedora8
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/913
unknown
Flatpak 1.18.1 fixes multiple vulnerabilities
Sep 23, 2026🔧 No Patch
CVE-2026-96808
CVSS 7.4EPSS 0%high
Sep 23, 2026🔧 No Patch
CVE-2026-96807
CVSS 4.0EPSS 0%medium
Sep 23, 2026🔧 No Patch
CVE-2026-94422
unknown
xdg-dbus-proxy 0.1.9 fixes sandbox escape CVE-2026-94422
Sep 23, 2026🔧 No Patch
CVE-2026-96276
CVSS 9.8EPSS 0%critical
Flatpak: flatpak: arbitrary write in host context via flatpak build-init
Sep 23, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/884
unknown
xdg-dbus-proxy 0.1.9 fixes sandbox escape CVE-2026-94422
Sep 23, 2026🔧 No Patch
CVE-2026-96275
CVSS 8.8EPSS 0%high
Flatpak: flatpak: arbitrary write access as root via extra-data extraction
Sep 23, 2026🔧 No Patch
REDHAT-BUG-2539416
CVSS 7.0high
Sep 23, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/879
unknown
xdg-dbus-proxy: GHSA-r7hp-698j-2h6c: broadcast message filtering bypass
Sep 22, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/877
unknown
Flatpak 1.18.1 fixes multiple vulnerabilities
Sep 22, 2026🔧 No Patch
Monitor Flatpak in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.