Apple Container
6 CVEs affecting Apple Container. Latest disclosed: 2026-10-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20613 | High | 7.8 | 2026-01-23 | The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive memb… |
CVE-2026-64773 | High | 7.5 | 2026-08-20 | An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's d… |
CVE-2026-28909 | Medium | 6.5 | 2026-04-30 | Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is… |
CVE-2026-64777 | Medium | 4.3 | 2026-08-20 | A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when i… |
CVE-2026-113957 | | 2026-10-29 | An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so tha… | |
CVE-2026-113951 | | 2026-10-23 | If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubect… |