PackageKit

Products

ProductCVEsExploitedLatest
PackageKit3–Apr 22, 2026

Exploited and recent CVEs

  • CVE-2026-41651 High 8.8 PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root 0.5%
  • CVE-2020-16122 High 8.2 Packagekit's apt backend lets user install untrusted local packages 0.3%
  • CVE-2020-16121 Low 3.3 PackageKit error messages leak presence and mimetype of files to unprivileged users 0.5%