CVE-2021-3626

2021-10-0103:15:06

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

CPENameOperatorVersion
multipasseq0.10.0
multipasseq0.6.0
multipasseq1.3.0-rc
multipasseq0.7.0-dev2
multipasseq0.10.0-rc
multipasseq0.6.1
multipasseq0.5
multipasseq1.2.0-de
multipasseq1.5.0-de
multipasseq0.9.0-de

Name	Operator	Version
multipass	eq	0.10.0
multipass	eq	0.6.0
multipass	eq	1.3.0-rc
multipass	eq	0.7.0-dev2
multipass	eq	0.10.0-rc
multipass	eq	0.6.1
multipass	eq	0.5
multipass	eq	1.2.0-de
multipass	eq	1.5.0-de
multipass	eq	0.9.0-de