Vulnerabilities in containers
9 resultsVexday analysis
O ecossistema de containers apresenta 6 vulnerabilidades catalogadas, com apenas 1 publicada nos últimos 90 dias, indicando risco moderado e estável. Nenhuma das falhas está sob exploração ativa (KEV) e não há críticas de CVSS elevado, reduzindo a urgência operacional imediata. A fraqueza dominante (CWE-269 — Improper Handling of Privilege) demanda vigilância na gestão de permissões e execução privilegiada em ambientes containerizados.
CVE-2020-5291HIGHPrivilege escalation in setuid mode via user namespaces in BubblewrapEPSS 0.9%CVE-2026-33414MEDIUMPowerShell Command Injection in Podman HyperV MachineEPSS 0.6%CVE-2025-24965HIGH.krun_config.json symlink attack creates or overwrites file on the host in crunEPSS 0.6%CVE-2026-35406MEDIUMAardvark-dns has incorrect error handling for malformed tcp packetsEPSS 0.4%CVE-2026-41163HIGHbubblewrap vulnerable to privilege escalation in setuid mode via ptraceEPSS 0.3%CVE-2026-44517MEDIUMBuildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archiveEPSS 0.2%CVE-2026-47766MEDIUMcrun follows rootfs /dev symlink while creating default devicesEPSS 0.2%CVE-2026-30892NONECrun incorrectly parses `crun exec` option `-u`, leading to privilege escalationEPSS 0.2%CVE-2026-52791LOWfuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)EPSS 0.1%