Vulnerabilidades de Apple Containerization (CVE)

Registros CVE publicados para Apple Containerization, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
5.6Media
CVE-2026-113957
Apple container; Apple containerization

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the p…

7.5Alta
CVE-2026-65388
Apple containerization

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

7.8Alta
CVE-2026-20613
Apple Container; Apple Containerization

The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user…