Apple Containerization
3 CVEs affecting Apple Containerization. Latest disclosed: 2026-10-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20613 | High | 7.8 | 2026-01-23 | The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive memb… |
CVE-2026-65388 | High | 7.5 | 2026-09-16 | A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim'… |
CVE-2026-113957 | | 2026-10-29 | An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so tha… |