James Henstridge discovered that snapd's default apparmor template did
not restrict access to systemd-userdbd varlink interface. A local
attacker could possibly use this issue to obtain sensitive information.
(CVE-2024-5300)

Qualys discovered that snap-confine can be tricked to create
attacker-controlled files at certain privileged locations. A...