Is CVE-2019-7303 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2019-7303, but active exploitation has not been confirmed.

Can CVE-2019-7303 be exploited remotely?

Yes. CVE-2019-7303 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2019-7303?

CVE-2019-7303 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2019-7303

HIGHPOC

CVE-2019-7303

CWE-628Published: April 23, 2019· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

NVD Source

Technical Analysis

CVE-2019-7303 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 7.5.

A proof-of-concept (PoC) exploit exists for CVE-2019-7303. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.