7.3
Élevée
CVE-2025-5199 In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker…
Description
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Multipass 1.16 | premières → < 1.16.0 | 1.16.0 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Multipass
Les 5 CVE de Multipass →
CVE-2026-49237
An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for…
7.8
Élevée
CVE-2026-49238
An issue was discovered in Canonical Multipass before version 1.16.3
8.4
Élevée
CVE-2021-3747
The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with…
8.8
Élevée
CVE-2021-3626
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket…
8.8
Élevée