Vulnerabilities

TI-2026-60093 CVE-2026-88264 · GHSA-ppgw-cqj8-9qrg

Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

LOW 24

A flaw was found in crun.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00121 Published 2026-09-10 Partial fix · 1.30-1.hum1 CWE-59

TI-2026-32447 CVE-2026-44517 · GHSA-49p4-px3h-rq49

Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

LOW 27

Buildah is a tool that facilitates building OCI images.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00184 Published 2026-08-21 Partial fix · 1.43.2 CWE-22

TI-2026-35263 CVE-2026-47766

crun follows rootfs /dev symlink while creating default devices

LOW 23

crun is an open source OCI Container Runtime fully written in C.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00196 Published 2026-08-14 Partial fix · 1.28 CWE-61

TI-2026-37901 CVE-2026-52791

fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

MEDIUM 44

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00145 Published 2026-07-29 Partial fix · 1.17 CWE-266

TI-2026-29788 CVE-2026-41163

bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

MEDIUM 43

bubblewrap is a low-level unprivileged sandboxing tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00274 Published 2026-05-09 Fixed in 0.11.2 CWE-269

TI-2026-25811 CVE-2026-33414 · GHSA-hc8w-h2mf-hp59

PowerShell Command Injection in Podman HyperV Machine

LOW 28

Podman is a tool for managing OCI containers and pods.

CVSS 4.0MEDIUM 4.0 Local High privileges No interaction EPSS 0.00607 Published 2026-04-14 Fixed in 5.8.2 CWE-78

TI-2026-27542 CVE-2026-35406 · GHSA-hfpq-x728-986j

Aardvark-dns has incorrect error handling for malformed tcp packets

LOW 33

Aardvark-dns is an authoritative dns server for A/AAAA container records.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00398 Published 2026-04-07 Partial fix · 1.17.1 CWE-400

TI-2026-23721 CVE-2026-30892

Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

HIGH 67

crun is an open source OCI Container Runtime fully written in C.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-03-25 Partial fix · 1.27 CWE-269

TI-2025-18645 CVE-2025-24965

.krun_config.json symlink attack creates or overwrites file on the host in crun

HIGH 72

crun is an open source OCI Container Runtime fully written in C.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00577 Published 2025-02-19 Partial fix · 1.20 CWE-22

TI-2024-08665 CVE-2024-9341 · GHSA-mc76-5925-c5p6

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

LOW 38

A flaw was found in Go.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01028 Published 2024-10-01 Fixed in 0.60.4, 8100020241023085649.afee755d +340 CWE-59

TI-2024-07805 CVE-2024-8418 · GHSA-g5jh-57wm-p79m

Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

MEDIUM 40

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00807 Published 2024-09-04 Fixed in 2:1.14.0-1.el9, 1.12.2 CWE-400

TI-2020-04347 CVE-2020-5291

Privilege escalation in setuid mode via user namespaces in Bubblewrap

LOW 36

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00904 Published 2020-03-31 Fixed in 0.4.1 CWE-648

Vulnerabilities

Filters