CVSS 3.1 base metricsRed raises the risk · green lowers it
Attack vector
LocalAV:L
Attack complexity
LowAC:L
Privileges required
LowPR:L
User interaction
NoneUI:N
Scope
UnchangedS:U
Confidentiality
NoneC:N
Integrity
NoneI:N
Availability
HighA:H
Updates that fix it
0 KBs
No KB listed
No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.
Affected products
Open Source Software
15 affected products
azl3 containerd2 2.3.4-1 on Azure Linux 3.0
azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0
azl3 docker-compose 2.27.0-14 on Azure Linux 3.0
azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0
azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0
azl3 kubernetes 1.30.10-30 on Azure Linux 3.0
azl3 kubernetes 1.30.10-32 on Azure Linux 3.0
azl3 kubevirt 1.8.4-2 on Azure Linux 3.0
azl3 moby-engine 25.0.3-20 on Azure Linux 3.0
azl3 runc 1.4.3-1 on Azure Linux 3.0
azl3 runc 1.4.3-2 on Azure Linux 3.0
azl3 skopeo 1.14.4-13 on Azure Linux 3.0
azl3 telegraf 1.31.0-33 on Azure Linux 3.0
What changed
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
Affected products: azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubernetes 1.30.10-32 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 runc 1.4.3-2 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
Detection template: No Nuclei template listed · Customer action: Required: apply the update → Required: follow the MSRC remediation guidance · Public disclosure: No → Unknown: not stated by MSRC · Exploitation detected: Not reported by MSRC → Unknown: not stated by MSRC
Affected products: azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
Detection template: Unknown: exploit-code evidence is incomplete or retained → No Nuclei template listed · CISA KEV: Unknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
Detection template: No Nuclei template listed → Unknown: exploit-code evidence is incomplete or retained · CISA KEV: Not listed in the collected catalog → Unknown: catalog evidence is incomplete or retained
Affected products: azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-cli 25.0.7-5 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 libcontainers-common 20240213-3 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
2 Nov 2026 · 09:04:36 UTCAffected productsazl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubernetes 1.30.10-32 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 runc 1.4.3-2 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
26 Oct 2026 · 07:26:10 UTCAffected productsazl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 runc 1.4.3-1 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
23 Oct 2026 · 09:33:49 UTCPublic exploit codeUnknown: exploit-code evidence is incomplete or retained → No Nuclei template listed
23 Oct 2026 · 09:33:49 UTCCISA KEVUnknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
16 Oct 2026 · 07:41:54 UTCAffected productsazl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-cli 25.0.7-5 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 libcontainers-common 20240213-3 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0 → azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 httpd 2.4.68-1 on Azure Linux 3.0, azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 skopeo 1.14.4-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-33 on Azure Linux 3.0
EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Oct 8, 2026, 4:22:25 PM
dateUpdated: Oct 8, 2026, 5:27:37 PM
8 related source bulletins · separate from aliases
SUSE-SU-2026:24374-1: Security update for google-osconfig-agent
CVE-2026-61801 · CVE-2026-78669 · CVE-2026-95838
RHSA-2026:76448: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
openSUSE-SU-2026:12152-1: google-osconfig-agent-20261015.00-1.1 on GA media
CVE-2026-61801 · CVE-2026-78669 · CVE-2026-95838
msrc_CVE-2026-61801: github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
CVE-2026-61801
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Deferred
Weakness classifications: CWE-400
Original publisher date fields
published: 2026-10-08T17:17:17.433
lastModified: 2026-10-08T21:35:53.890
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.