Skip to content

Vulnerabilities of Google Gvisor

Is your version affected?

CVE Summary Score Published
CVE-2026-95702 Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local… 8.5 High Oct 9, 2026
CVE-2026-96812 Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit… 8.8 High Sep 25, 2026
CVE-2025-2713 Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file… 6.8 Medium Mar 28, 2025
CVE-2024-10603 Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to… 6.3 Medium Jan 30, 2025
CVE-2024-10026 A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to… 6.3 Medium Jan 30, 2025
CVE-2023-7258 A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead… 4.8 Medium May 15, 2024

Other Google products