runc container escape with malicious config due to /dev/console mount and related races
osv · CVE-2025-52565 · GO-2025-4097
Go: github.com/opencontainers/runc · Go: github.com/opencontainers/runc · Go: github.com/opencontainers/runc
No access to your tenant or devices. Every item links to its source. What this means
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · CVE-2025-52565 · GO-2025-4097
Go: github.com/opencontainers/runc · Go: github.com/opencontainers/runc · Go: github.com/opencontainers/runc
osv · BIT-dotnet-2025-26646 · BIT-dotnet-sdk-2025-26646 · CVE-2025-26646
NuGet: Microsoft.Build.Tasks.Core · NuGet: Microsoft.Build.Tasks.Core · NuGet: Microsoft.Build.Tasks.Core
osv · CVE-2025-11362
npm: pdfmake
osv · CVE-2025-11579 · GO-2025-4020
Go: github.com/nwaples/rardecode/v2 · Go: github.com/nwaples/rardecode
osv · CVE-2025-47909 · GO-2025-3884
Go: github.com/gorilla/csrf
osv · CVE-2025-53892
npm: vue-i18n · npm: vue-i18n · npm: vue-i18n
osv · BIT-vault-2025-6203 · CVE-2025-6203 · GO-2025-3924
Go: github.com/hashicorp/vault
osv · CVE-2025-8077 · GO-2025-3918
Go: github.com/neuvector/neuvector
osv · CVE-2025-53945 · GO-2025-3816
Go: chainguard.dev/apko
osv · CVE-2025-7783
npm: form-data · npm: form-data · npm: form-data
osv · CVE-2025-54075
npm: @nuxtjs/mdc
osv · CVE-2025-54369
npm: node-saml · npm: @node-saml/node-saml
osv · CVE-2025-49136 · GO-2025-3745
Go: github.com/knadh/listmonk
osv · CVE-2025-5791 · RUSTSEC-2025-0040
crates.io: users
osv · CVE-2025-47269
npm: code-server
osv · CVE-2025-47948
npm: cocotais-bot
osv · BIT-openbao-2025-4166 · BIT-vault-2025-4166 · CVE-2025-4166 · GO-2025-3663
Go: github.com/hashicorp/vault
osv · CVE-2025-48075 · GO-2025-3706
Go: github.com/gofiber/fiber/v2
osv · CVE-2025-47934
npm: openpgp · npm: openpgp
osv · CVE-2025-48938 · GO-2025-3732
Go: github.com/cli/go-gh/v2
osv · CVE-2024-52290 · GO-2025-3682
Go: github.com/lf-edge/ekuiper · Go: github.com/lf-edge/ekuiper/v2
osv · CVE-2025-4574 · RUSTSEC-2025-0024 · TROVE-2025-013
crates.io: crossbeam-channel
osv · CVE-2025-2564 · GO-2025-3623
Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8
osv · CVE-2023-27592
Go: miniflux.app/v2
osv · CVE-2025-43972 · GO-2025-3632
Go: github.com/osrg/gobgp · Go: github.com/osrg/gobgp/v3
osv · BIT-kyverno-2025-46342 · CVE-2025-46342 · GO-2025-3652
Go: github.com/kyverno/kyverno · Go: github.com/kyverno/kyverno
osv · CVE-2025-27538 · GO-2025-3620
Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8
osv · CVE-2025-0716
npm: angular
osv · CVE-2025-43970 · GO-2025-3630
Go: github.com/osrg/gobgp · Go: github.com/osrg/gobgp/v3
osv · CVE-2025-24839 · GO-2025-3621
Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8
osv · CVE-2025-2475 · GO-2025-3610
Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8
osv · CVE-2025-32445 · GO-2025-3608
Go: github.com/argoproj/argo-events
osv · CVE-2025-46653
npm: formidable · npm: formidable
osv · CVE-2025-43971 · GO-2025-3631
Go: github.com/osrg/gobgp/v3
osv · CVE-2025-41395 · GO-2025-3642
Go: github.com/mattermost/mattermost-plugin-playbooks · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8
osv · CVE-2025-46327 · GO-2025-3650
Go: github.com/snowflakedb/gosnowflake
osv · BIT-helm-2025-32387 · CVE-2025-32387 · GO-2025-3602
Go: helm.sh/helm/v3
osv · CVE-2023-27591
Go: miniflux.app/v2 · Go: miniflux.app
osv · CVE-2025-43858
NuGet: YoutubeDLSharp
osv · CVE-2025-32093 · GO-2025-3609
Go: github.com/mattermost/mattermost-server · Go: github.com/mattermost/mattermost-server · Go: github.com/mattermost/mattermost-server
osv · CVE-2025-32395
npm: vite · npm: vite · npm: vite
osv ·
Go: github.com/traefik/traefik/v3 · Go: github.com/traefik/traefik/v2 · Go: github.com/traefik/traefik/v3
osv · RUSTSEC-2025-0022
crates.io: openssl
osv · CVE-2025-27936 · GO-2025-3618
Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost/server/v8 · Go: github.com/mattermost/mattermost-plugin-msteams
osv · CVE-2025-4432 · GHSA-c86p-w88r-qvqr · GO-2025-3678 · RUSTSEC-2025-0009
crates.io: ring
osv · CVE-2025-1974 · GO-2025-3567
Go: k8s.io/ingress-nginx · Go: k8s.io/ingress-nginx
osv · CVE-2025-31130 · RUSTSEC-2025-0021
crates.io: gix-features · crates.io: gix-commitgraph · crates.io: gix-index
osv · CVE-2025-31125
npm: vite · npm: vite · npm: vite
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.