VulDB 🛡@vuldb
⚠️ The severity is increased for this new vulnerability affecting Google gVisor (CVE-2026-95702) vuldb.com/vuln/415919 https://t.co/3zdD0dt9an
0000061
2.3K followersView on X
CVE-2026-95702
LOWCVSS 8.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-415CWE-416
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day