8.8
Élevée
CVE-2021-3626 The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket…
Description
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multipass 1.7 | premières → < 1.7.0 | 1.7.0 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Multipass
Les 5 CVE de Multipass →
CVE-2026-49237
An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for…
7.8
Élevée
CVE-2026-49238
An issue was discovered in Canonical Multipass before version 1.16.3
8.4
Élevée
CVE-2025-5199
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker…
7.3
Élevée
CVE-2021-3747
The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with…
8.8
Élevée