55 matches found
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
EUVD-2026-62192
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
CVE-2026-47699 Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
PT-2026-78232
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make image rs::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs, t...
Microsoft ACI Confidential Containers Information Disclosure Vulnerability
Microsoft ACI Confidential Containers is a Microsoft credentials container. A security vulnerability exists in Microsoft ACI Confidential Containers that stems from an improper design and can be exploited by an attacker to obtain sensitive information...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Microsoft ACI Confidential Containers is a Microsoft credentials container. A security vulnerability exists in Microsoft ACI Confidential Containers that stems from a poor design and can be exploited by a local attacker to elevate privileges...
EUVD-2026-9888
Microsoft ACI Confidential Containers Information Disclosure Vulnerability...
EUVD-2026-9889
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability...
CVE-2026-26122
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-26124
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-26122 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-26122
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-26122 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-26122
CVE-2026-26122 is a Microsoft ACI Confidential Containers information disclosure vulnerability. Per the CVSS v3.1 metrics, it has a NETWORK attack vector, LOW attack complexity, LOW privileges required, no user interaction, and a HIGH confidentiality impact (C:H; I:N; A:N) with a base score of 6....
CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-26124
CVE-2026-26124 concerns Microsoft ACI Confidential Containers with elevation of privilege in Azure Compute Gallery. The description indicates an authorized attacker can locally elevate privileges via a flaw described as '.../...//' in the Compute Gallery. Connected advisories show Microsoft fixed...