26 matches found
CVE-2026-112917
In Docker Desktop for Windows using the WSL2 backend , an unprivileged Linux container can utilize a 32-bit socketcall to bypass default seccomp restrictions on AF_VSOCK . This vulnerability allows an attacker to expose host-facing services and Windows files accessible to the logged-in user. The ...
EUVD-2026-116144
In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AFVSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-bas...
procrustes
Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...
CVE-2026-31431
Ubuntu 24.04.3 LTS Kernel: Linux 6.6.87.1-microsoft-standard-WSL2 Kali GNU/Linux Rolling Kernel: Linux 6.6.87.1-microsoft-standard-WSL2...
Compatibility Subsystem Execution Linux Applications Windows WSL2
The vulnerability of the compatibility subsystem’s kernel for running Linux applications involves synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to replace data with malicious content...
Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally...
PT-2026-114471
Уязвимость ядра подсистемы совместимости для запуска Linux-приложений Windows Subsystem for Linux WSL2 операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю подменить данные...
web-app-security-owasp-zap
🔐 Web Application Security Testing with OWASP ZAP Author:...
Unable to run WSL2 on the W11 VDI machine
When customers attempt to install the WSL 2 Ubuntu distribution on Windows 11 VDIs , they encounter the following message: Installing, this may take a few minutes. Error observedWslRegisterDistribution failed with error: 0xe000020b Error: 0xe000020b null...
"WSL/Service/CreateInstance/CreateVm/ConfigureNetworking/HNS/0xe000020b” installing WSL2 in MCS VMs
...
qemu-kvm bug fix update
An update is available for qemu-kvm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linux...
Security Updates for Windows Subsystem for Linux (WSL2) Elevation of Privilege (December 2022)
The wsl2 installation on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid169974;...
CVE-2022-44689
CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...
KB5021237: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2022)
The remote Windows host is missing security update 5021237. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability CVE-2022-44689 - A remote code executio...
CVE-2022-44689: Improper Privilege Management
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)
The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability CVE-2022-44689 - A remote code executio...
KB5021249: Windows Server 2022 Security Update (December 2022)
The remote Windows host is missing security update 5021249. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorize...
CVE-2022-38014
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
CVE-2022-38014
CVE-2022-38014 affects Windows Subsystem for Linux (WSL2) kernel components. The CVSSv3 metrics in the initial record indicate a Local, Privilege-Required (Low), No User Interaction, with Confidentiality, Integrity, and Availability impacts all High, resulting in a base score of 7.0 (HIGH). The v...
