Beveiligingsadvies

CVE-2025-2713

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-28 15:27:43
Laatst bijgewerkt 2025-09-08 09:47:48
Toegewezen door Google
CVSS-score 6.8
Status PUBLISHED

Beschrijving

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.