Google Gvisor vulnerabilities

• google gvisor Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile CVE-2026-95702 Fix available 8.5 HighOctober 9, 2026
• google gvisor Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE CVE-2026-96812 Fix available 8.8 HighSeptember 25, 2026
• google gvisor Improper File Permission Handling in Google gVisor runsc CVE-2025-2713 Fix available 6.8 MediumMarch 28, 2025
• google gvisor Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's... CVE-2024-10603 Fix available 6.3 MediumJanuary 30, 2025
• google gvisor Improved Seeding and Hashing In gVisor CVE-2024-10026 Fix available 6.3 MediumJanuary 30, 2025
• google gvisor Denial-of-Service in Gvisor CVE-2023-7258 Fix available 4.8 MediumMay 15, 2024
• google gvisor Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure... CVE-2018-20168 5.5 MediumDecember 17, 2018
• google gvisor pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite... CVE-2018-19333 9.8 CriticalNovember 17, 2018
• google gvisor Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS. CVE-2018-16359 6.8 MediumSeptember 2, 2018