Skip to content
OpenAdvisories

Product · Google

gVisor

6 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.5

    Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

    Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an …

  • High 8.8

    Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

    Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code executio…