GCVE - cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Gvisor (`92d56a29-03ab-50ea-834e-e3297d035baf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/google/gvisor`	purl2cpe	2026-06-01 10:16:38.681659
`pkg:rpm/fedora/golang-gvisor`	purl2cpe	2026-06-01 10:16:38.681660

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-95702`	vulnerable	2026-11-03 10:15:49.697684	Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries. Published: 2026-10-09T14:44:35.711Z Updated: 2026-10-15T18:15:18.924Z Open on db.gcve.eu Reference links https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2713`	vulnerable	2026-06-08 07:16:58.121263	Improper File Permission Handling in Google gVisor runsc Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork. Published: 2025-03-28T15:27:43.231Z Updated: 2025-09-08T09:47:48.152Z Open on db.gcve.eu Reference links https://github.com/google/gvisor/commit/586c38d70081b13b2ed494cef48e99b93956843e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2713`	not_vulnerable	2026-06-08 07:16:58.121106	Improper File Permission Handling in Google gVisor runsc Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork. Published: 2025-03-28T15:27:43.231Z Updated: 2025-09-08T09:47:48.152Z Open on db.gcve.eu Reference links https://github.com/google/gvisor/commit/586c38d70081b13b2ed494cef48e99b93956843e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10603`	vulnerable	2026-06-08 06:23:47.058973	Details available Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances. Published: 2025-01-30T19:14:38.619Z Updated: 2025-02-24T11:59:44.637Z Open on db.gcve.eu Reference links https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2 https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52 https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205 https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10603`	not_vulnerable	2026-06-08 06:23:47.058913	Details available Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances. Published: 2025-01-30T19:14:38.619Z Updated: 2025-02-24T11:59:44.637Z Open on db.gcve.eu Reference links https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2 https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52 https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205 https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10026`	vulnerable	2026-06-08 06:22:03.435161	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10026`	not_vulnerable	2026-06-08 06:22:03.435108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7258`	vulnerable	2026-06-08 06:21:57.426864	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20168`	vulnerable	2026-06-08 05:11:26.750211	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19333`	vulnerable	2026-06-08 05:11:15.634490	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16359`	vulnerable	2026-06-08 05:11:04.749773	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Gvisor

Notes

PURL mappings

Vulnerability references

Contribute