52 matches found
Windows Subsystem for Linux GUI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network...
Linux Distros Unpatched Vulnerability : CVE-2025-26675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. CVE-2025-26675 Note that Nessus relies on the...
CVE-2025-9074
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...
CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation ECI enabled, and with or without th...
PT-2025-34057
Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.44.3 Description A flaw in the container isolation mechanism of Docker Desktop for Windows and macOS allows local Linux containers to gain unauthenticated access to the Docker Engine API via the configured...
Microsoft Windows Subsystem for Linux (WSL2) < 2.5.10 Kernel Elevation of Privilege (August 2025)
The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.5.10. It is, therefore, affected by a kernel elevation of privilege vulnerability: - Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to...
CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
KLA86591 PE vulnerability in Microsoft Open Source Software
An elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53788 Related products Microsoft-Windows CVE list CVE-2025-53788 high Solution Install necessary updates from the KB...
Important: git
Issue Overview: A flaw was found in the git fast-import command where it provides the export-marks feature that may unexpectedly overwrite arbitrary paths. An attacker can abuse this flaw if they can control the input passed to the fast-import command by using the export-marks feature and overwri...
CVE-2024-20681
Windows Subsystem for Linux Elevation of Privilege Vulnerability...
CVE-2024-20681
Windows Subsystem for Linux Elevation of Privilege Vulnerability...
Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2022-44689 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications. The Windows Subsystem for Linux (WSL2) and the Azure IoT Edge for Linux on Windows (EFLOW) environment enable attackers to enhance their privileges.
The vulnerability of the compatibility subsystem’s kernel for running Linux applications is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2022-38014
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
CVE-2022-38014
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
Privilege escalation
Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...
CVE-2021-43907
Visual Studio Code WSL Extension Remote Code Execution Vulnerability...
Microsoft Windows Subsystem for Linux 产品权限许可和访问控制问题漏洞
Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows Subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A vulnerability exists in the Microsoft Windows Subsystem for Linux with privilege permission and access control issues. Windo...
The vulnerability affects the security component of the WSL subsystem of the distributed Git version control system. It allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of the security component of the WSL subsystem of the distributed Git version control system is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data, cause service...