Vulnerabilitycritical
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-4034 | Out-of-Bounds Read/Write Local Privilege Escalation in polkit pkexec (PwnKit) | 7.8 | 95% | KEVRansomwarePoC ×4 | KEV |
| CVE-2023-4911 | Buffer Overflow in GNU C Library ld.so Grants Root via SUID Binaries | 7.8 | 64% | KEVPoC ×6 | KEV |
| CVE-2025-32463 | Local Privilege Escalation to Root in Sudo via Untrusted nsswitch.conf with --chroot | 7.8 | 55% | KEVPoC ×3 | KEV |
| CVE-2025-49844 | Use-After-Free (RediShell) RCE in Redis Lua Scripting | 9.9 | 83% | PoC | |
| CVE-2025-55182 | Unauthenticated RCE in React Server Components (React2Shell) | 10.0 | 100% | KEVRansomwarePoC ×13 | KEV |
| CVE-2026-24061 | Argument Injection Authentication Bypass in GNU Inetutils telnetd | 9.8 | 99% | KEVPoC ×8 | KEV |
From the original article
13 min read at securelist.com
Containerization using Docker has become firmly established in modern development standards, significantly increasing the speed and convenience of deploying various services. Developers often use ready-made Docker images, making only minimal changes. The largest repository of container images is the Docker Hub service.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.