CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections
2026-07-23T02:51:44Z•8f7dfe4764dcfe74370ceaf8686772f66071e137f37b426cc93b35c8a7d237f4
active-exploitationknown-exploited-vulnerabilitiespatch-releasedprivilege-escalationransomwareremote-code-executionsupply-chain-risksurveillancevulnerabilityzero-day
What happened
Multiple high- and critical-severity vulnerabilities and active-exploitation incidents reported: Ubuntu snap-confine local privilege escalation (CVE-2026-8933) disclosed by Qualys; Adobe Acrobat Chrome extension chain (CVE-2026-48294) allowing silent WhatsApp data theft; public PoC triggered active exploitation of critical Microsoft SharePoint RCE (CVE-2026-50522); ServiceNow pre-auth RCE (CVE-2026-6875) under exploitation; PAN-OS GlobalProtect auth-bypass (CVE-2026-0257) abused by Qilin ransomware affiliates; 7-Zip remote code execution in XZ handling patched in 26.02; Zimbra 10.1.20 fixes a(
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8f7dfe4764dcfe74370ceaf8686772f66071e137f37b426cc93b35c8a7d237f4
- Enrichment time
- 2026-07-23T02:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.