2794 matches found
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
EUVD-2026-62192
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
CVE-2026-47699 Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
PT-2026-78232
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make image rs::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs, t...
GO-2024-3042 vulnerabilities
Vulnerabilities for packages: podman...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nats-server-config-reloader, contour, yunikorn-k8shim, flux-operator, dapr, vault-csi-provider, guac, cg, swagger, fulcio, gobump, grafana-alloy, tigera-operator, kube-logging-operator, cloud-provider-vsphere, nri-mysql, tkn, helm-operator, ipfs-cluster, oauth2-proxy...
CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1
CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1. A patched version of the package is available...
CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1
CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...
CVE-2026-73218
Cursor for macOS prior to 3.0.0 is vulnerable to a sandbox escape: an agent in Auto-Run Sandbox mode, with Docker Desktop and the Dev Containers CLI installed, can launch a privileged container and mount Docker’s virtiofs0. This grants read/write access to the user’s home directory and enables ho...
CVE-2026-20903
Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-20903
Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
EUVD-2026-56510
Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-20903
Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-20903
CVE-2026-20903 : Concrete details exist in connected documents: it describes a protection mechanism failure in some Intel AI Containers before v0.4.0 when running in Ring 3. The vulnerability could allow local-privilege escalation by a user with high privileges and low attack complexity, requirin...
Intel® AI Containers Software Advisory
Summary: A potential security vulnerability for some Intel® AI Containers software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® AI Containers software. Vulnerability Details:...
PT-2026-70316
Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-64676
Kata Containers is an open source implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers CoCo deployments, the kata-age...
CVE-2026-47243
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In this configuration, Kata runs the host...