Apple Container vulnerabilities

• apple container, containerization +1 more An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one… CVE-2026-113957 5.6 MediumOctober 29, 2026
• apple container If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host… CVE-2026-113951 7.8 HighOctober 23, 2026
• apple containerization A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This… CVE-2026-65388 7.5 HighSeptember 16, 2026
• apple container An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend… CVE-2026-64773 7.5 HighAugust 20, 2026
• apple container A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. Thi… CVE-2026-64777 4.3 MediumAugust 20, 2026
• apple container, macos +1 more Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3. CVE-2026-28909 6.5 MediumApril 30, 2026
• apple container, containerization +1 more Container and Containerization archive extraction does not guard against escapes from extraction base directory. CVE-2026-20613 Fix available 7.8 HighJanuary 22, 2026