Container (Apple) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 26 known versions, newest CVE from 2026-10-23. Vendor: Apple.

CVEs of Container

• CVE-2026-113951, 2026-10-23: If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf.…
• CVE-2026-64773 - CVSS 7.5 (high), 2026-08-20: An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's…
• CVE-2026-64777 - CVSS 4.3 (medium), 2026-08-20: A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when…
• CVE-2026-28909 - CVSS 6.5 (medium), 2026-04-30: Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is…
• CVE-2026-20613 - CVSS 7.8 (high), 2026-01-23: The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive…