CVE-2026-28909

概要

参考情報

• apple/container security advisory · Vendor Advisory

container のその他の脆弱性

• CVE-2026-64773高 7.5An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount…
• CVE-2026-64777中 4.3A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resol…
• CVE-2026-20613高 7.8The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extract…