96 matches found
CVE-2026-72971
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-62775
Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...
CVE-2026-62772
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62775
The CVE-2026-62775 issue concerns Windows Container Isolation FS Filter Driver (unionfs.sys). It is described as an incorrect authorization flaw that allows an authorized attacker to disclose information locally. From the available documents, the vulnerability affects the Windows container isolat...
CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability
...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
...
EUVD-2026-56379
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62772
The CVE-2026-62772 entry describes a heap-based buffer overflow in the Windows Container Isolation FS Filter Driver (unionfs.sys) that enables an authorized local attacker to elevate privileges. Affected component: Windows container isolation FS filter driver (unionfs.sys). Root cause: heap-based...
Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability
Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...
github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
CVE-2026-15788
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
CVE-2026-15788 WCOW cache mount source selector resolves NTFS junctions outside of cache root
BuildKit's cache mount source= selector on Windows Container on Windows WCOW workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon...
CVE-2026-15788 WCOW cache mount source selector resolves NTFS junctions outside of cache root
BuildKit's cache mount source= selector on Windows Container on Windows WCOW workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon...
CVE-2026-15788
CVE-2026-15788 concerns BuildKit on Windows Containers (WCOW). The issue is that the cache mount source= selector does not detect NTFS directory junctions inside the cache root, allowing a build authored by an untrusted user to read arbitrary host files reachable to the BuildKit daemon process. A...
CVE-2026-15788
BuildKit's cache mount source= selector on Windows Container on Windows WCOW workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon...
CVE-2026-50428
Out-of-bounds read in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...
CVE-2026-50428 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability
...
CVE-2026-50428
The CVE-2026-50428 entry concerns an Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) that enables a locally authorized attacker to disclose information (information disclosure). The issue affects the Windows Container Isolation FS Filter Driver path and is confirm...