23670 matches found
EUVD-2026-100981
The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...
CVE-2026-104795 Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution
The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...
CVE-2026-104795
The insights-runtime-extractor DaemonSet is vulnerable to a container escape due to insufficient privilege dropping during runtime fingerprinting. The coordinator uses seteuid() to switch users, but it fails to change the real UID (ruid) or saved-set-UID , which remain at 0 . Furthermore, the sec...
CVE-2026-104795 Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution
The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...
CVE-2026-104795
The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned...
BIT-GITEA-2026-96399 Gitea denial of service through external issue tracker patterns
A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...
PT-2026-114370
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM reference is dropped asynchronously, allowing the device to autosuspend while stale page faults belonging to the now-dead VM are still...
PT-2026-113977
Name of the Vulnerable Software and Affected Versions insights-runtime-extractor affected versions not specified Description The insights-runtime-extractor, running as a privileged DaemonSet, contains a flaw in how it handles privileges when scanning container processes. The coordinator fails to...
CVE-2026-104795: Execution with Unnecessary Privileges
The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...
CVE-2026-88219
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-83910
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-83908
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-83518
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-83515
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network...
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
CVE-2026-102203
Access of resource using incompatible type 'type confusion' in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-70162
A denial of service vulnerability exists in the Microsoft Common Object Runtime Library due to the improper handling of web requests. A remote unauthenticated attacker can exploit this by issuing specially crafted requests to a .NET web application , potentially causing a denial of service. The o...
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
EUVD-2026-100402
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...