Cyera Research Labs

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 17, 2026
Last mentionedSep 17, 2026

Timeline

1 articles · newest first

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Docker fixed CVE-2026-77179 (CVSS 9.4), a virtio-fs symlink flaw letting code inside macOS Sandboxes VMs read and modify host files; update to 0.42.0.

The Hacker NewsSep 17, 15:37 UTC · Sep 17, 2026VulnerabilityCVE-2026-77179 CVE-2026-799941

Related CVEs

by mentions

CVE-2026-77179<1%9.4
Symlink Escape in Docker Sandboxes virtio-fs Exposes macOS Host Files
published Sep 15, 2026Docker Sandboxes (virtio-fs host server on macOS, part of Docker Desktop)PoC
CVE-2026-799948.7
TOCTOU Symlink Race in Docker Sandboxes Socket Relay Exposes Host Sockets
published Sep 15, 2026Docker Sandboxes (guest-to-host Unix-domain socket relay)

Appears with

Docker Sandboxesproduct · 1
accompl.aiorganization · 1
CISAvendor · 1
Dockervendor · 1
ThreatNotifyorganization · 1
virtio-fsproduct · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.