Google Gvisor

• CVE-2026-95702 High 8.5 Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile <0.1%
• CVE-2026-96812 High 8.8 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE 0.1%
• CVE-2025-2713 Medium 6.8 Improper File Permission Handling in Google gVisor runsc <0.1%
• CVE-2024-10603 Medium 6.3 Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances. 0.3%
• CVE-2024-10026 Medium 6.3 Improved Seeding and Hashing In gVisor 0.2%
• CVE-2023-7258 Medium 4.8 Denial-of-Service in Gvisor 0.2%