372 matches found
CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver
Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...
PT-2026-86236
Name of the Vulnerable Software and Affected Versions Amazon EFS CSI Driver versions prior to v3.4.1 Description The volume deletion component fails to verify the ownership of a storage access point. This allows an authenticated Kubernetes user with PersistentVolume creation privileges to trigger...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, aws-efs-csi-driver-fips...
GO-2023-2330 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2022-0983 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver-fips...
GO-2024-2746 vulnerabilities
Vulnerabilities for packages: rancher-webhook-fips, aws-efs-csi-driver, argocd-image-updater-fips, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, aws-efs-csi-driver-fips, ip-masq-agent, kubeflow-pipelines, rancher-webhook, spark-operator, aws-ebs-csi-driver, local-static-provisioner,...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, aws-efs-csi-driver, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver-fips, ip-masq-agent, spark-operator, aws-ebs-csi-driver...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: cri-tools, argocd-image-updater, ip-masq-agent, kubeflow-pipelines, kubernetes-dns-node-cache, local-static-provisioner, k8s-device-plugin, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, nodetaint, spark-operator...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, ip-masq-agent, kubeflow-pipelines, kubernetes-dns-node-cache, local-static-provisioner, k8s-device-plugin, aws-efs-csi-driver, nodetaint...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, prometheus-adapter...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...
CVE-2026-59128
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability
...
CVE-2026-59128
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
EUVD-2026-56309
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-59128
The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...
