What is CVE-2026-8933?

CVE-2026-8933 is a high-severity vulnerability in Canonical Ubuntu 22.04 Lts, classified under CWE-250. CVSS score: 7.8/10. Published 2026-07-21.

How severe is CVE-2026-8933?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Canonical Ubuntu 22.04 Lts

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affect…

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Canonical Ubuntu 22.04 Lts — versions 2.76+ubuntu22.04.1
Canonical Ubuntu 24.04 Lts — versions 2.76+ubuntu24.04.1
Canonical Ubuntu 26.04 Lts — versions 2.76+ubuntu26.04.3

Weakness classification (CWE)

CWE-250

References

security@ubuntu.com (issue-tracking, vdb-entry)

Frequently asked questions

What is CVE-2026-8933?: CVE-2026-8933 is a high-severity vulnerability in Canonical Ubuntu 22.04 Lts, classified under CWE-250. CVSS score: 7.8/10. Published 2026-07-21.
How severe is CVE-2026-8933?: High severity. CVSS v3 base score is 7.8 out of 10.