951 matches found
PT-2025-45350
Name of the Vulnerable Software and Affected Versions runc versions 1.2.0 through 1.2.7 runc versions 1.3.0-rc.1 through 1.3.1 runc versions 1.4.0-rc.1 through 1.4.0-rc.2 Description An issue exists in the maskedPaths function where insufficient verification of the bind-mount source occurs when...
Security Bulletin: IBM Fusion HCI is vulnerable to potential container escapes
Summary An OpenShift or Fusion administrator, or potentially an attacker who gains access to a certain Storage Fusion containers, can gain access to underlying node linux capabilities, increasing the possibility of a container escape such as CVE-2022-0185. Vulnerability Details CVEID:CVE-2022-018...
Exploit for Incorrect Authorization in Oracle Mysql
RECORDS Only for reproduction of CVEs. Related Resources: -...
Docker Desktop 4.46.0 < 4.47.0 Container Escape
The version of Docker Desktop is prior to 4.47.0. It is therefore affected by a container escape vulnerability. In a hardened Docker environment, with Enhanced Container Isolation ECI https://docs.docker.com/enterprise/security/ hardened-desktop/enhanced-container-isolation/ enabled, an...
EUVD-2021-2523
Malware in sbrugna...
EUVD-2022-3809
Malicious code in bioql PyPI...
EUVD-2025-16091
Malicious code in bioql PyPI...
EUVD-2023-38884
Malicious code in bioql PyPI...
EUVD-2023-33680
Malicious code in bioql PyPI...
EUVD-2022-49539
Malicious code in bioql PyPI...
EUVD-2024-32860
Malicious code in bioql PyPI...
EUVD-2024-0867
Malicious code in bioql PyPI...
EUVD-2024-0459
Malicious code in bioql PyPI...
EUVD-2022-45227
Malicious code in bioql PyPI...
A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
...
VulnCheck KEV: CVE-2023-2163
Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape...
Docker Desktop < 4.44.3 Container Escape
The version of Docker Desktop is prior to 4.44.3. It is therefore affected by a container escape vulnerability. The vulnerability allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with...
Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3
Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker to break out of the confines of a container. The vulnerability, tracked as CVE-2025-9074 , carries a CVSS score of 9.3 out of 10.0. It has...
CVE-2025-57802 Airlink's Daemon Symlink Vulnerability
Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version 1.0.0, an attacker with access to the affected container can create symbolic links inside the mounted directory /app/data. Because the container bind-mounts an...