CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

CVE-2026-95702 Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

CVE-2026-96812

A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...

EUVD-2026-87111

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

PT-2026-98870

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to commit 573a9e73cf844f Description An improper exposure of resource to the wrong sphere exists in the host file helper gofer on Linux platforms with CUSE Character device for Userspace enabled. A local attacker...

EUVD-2018-8205

Malware in sbrugna...

EUVD-2018-12736

Malware in sbrugna...

EUVD-2018-11031

Malware in sbrugna...

EUVD-2025-8644

Malicious code in bioql PyPI...

EUVD-2024-33023

Malicious code in bioql PyPI...

EUVD-2024-32898

Malicious code in bioql PyPI...

Google gVisor elevation of privilege vulnerability (CNVD-2025-07534)

Google gVisor is a container sandboxing technology developed by Google to provide greater isolation and security for containers. An elevation of privilege vulnerability exists in Google gVisor, which can be exploited by an attacker to access restricted files...

CVE-2025-2713

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

CVE-2025-2713

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

CVE-2025-2713

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

CVE-2025-2713 Improper File Permission Handling in Google gVisor runsc

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

CVE-2025-2713 Improper File Permission Handling in Google gVisor runsc

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

CVE-2025-2713 Improper File Permission Handling in Google gVisor runsc

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...