Skip to content
fr Sign in
8.8 High

CVE-2021-3626 The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket…

Description

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

Affected products and versions

Product Affected versions Fixed in
Multipass 1.7 earliest → < 1.7.0 1.7.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Multipass

The 5 CVEs of Multipass →
CVE-2026-49237 An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for… 7.8 High CVE-2026-49238 An issue was discovered in Canonical Multipass before version 1.16.3 8.4 High CVE-2025-5199 In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker… 7.3 High CVE-2021-3747 The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with… 8.8 High
Track this CVE