Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to…CVE-2019-10063Flatpak · 1.9% likely

   CWE-20

2. TIOCLINUX can send commands outside sandbox if running on a virtual consoleCVE-2023-28100flatpak · CVSS 10 · 0.9% likely

   CWE-20

3. Sandbox bypass via recent VFS-manipulating syscallsCVE-2021-41133flatpak · CVSS 8.8 · 0.4% likely

   CWE-20

4. In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whit…CVE-2018-6560Flatpak · 0.4% likely

   CWE-436

5. xdg-dbus-proxy has an eavesdrop filter bypass allowing message interceptionCVE-2026-34080flatpak · CVSS 6.8 · 0.2% likely

   CWE-1289

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.