packagekit project
Security Risk Profile
79
/100
highSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 16, 2014 to present
8
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
79/100
high
Severity Distribution
Critical
0High
2Medium
2Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Race Condition
1
2
Use After Free
1
3
Infoleak
1
Most Affected Products
1. Packagekit Project Packagekit14
2. Ubuntu4
3. Debian Debian Linux4
4. redhat Enterprise Linux3
5. redhat/PackageKit2
Recent Vulnerabilities
See more →CVE-2026-41651
CVSS 8.8high
PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root
4/22/2026🔧 No Patch
CVE-2024-0217
CVSS 3.3EPSS 0%low
Packagekitd: use-after-free in idle function callback
1/3/2024
CVE-2022-0987
CVSS 3.3low
3/15/2022🔧 No Patch
CVE-2020-16121
CVSS 3.3low
PackageKit error messages leak presence and mimetype of files to unprivileged users
11/7/2020🔧 No Patch
CVE-2020-16122
CVSS 8.2high
Packagekit's apt backend lets user install untrusted local packages
11/7/2020🔧 No Patch
CVE-2011-2515
CVSS 5.3medium
11/27/2019
CVE-2018-1106
CVSS 5.5medium
4/11/2018
CVE-2013-1764
CVSS 2.1low
4/16/2014
Monitor packagekit project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.