Vulnerabilities & Exploits
Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes Google Cloud disclosed multiple high-severity Linux kernel vulnerabilities affecting Container-Optimized OS nodes. These flaws allow privilege escalation, risking control over container hosts. The bulletins also cover medium to high severity vulnerabilities in Envoy Proxy and Istio, components used in service mesh architectures.
Additionally, Vertex AI Experiments has a bucket naming flaw (CVE-2026-2473 ) that could let attackers pre-create buckets to execute cross-tenant remote code, steal models, or poison data. Google states no customer action is needed for this issue.
1 source · Mar 31
CVEs in this update
332 CVEs
Across react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel, and related packages.
18 critical · 170 high · 117 medium · 9 low
20 in CISA KEV · 121 with EPSS above 1%
21 with functional or packaged public exploit code
Highest severity: CVE-2025-55182 · 10.0 CRITICAL
Highest EPSS: CVE-2021-22005 · 100%
Showing the top 10 by KEV, EPSS, and severity.
Timeline Mar 31 Reported by Google Cloud Security Bulletins Dec 12 CISA federal deadline for CVE-2025-55182 passedDec 5 CVE-2025-55182 added to CISA KEVOct 27 CISA federal deadline for CVE-2025-61882 passedOct 6 CVE-2025-61882 added to CISA KEVFeb 12 CISA federal deadline for CVE-2023-34048 passedJan 22 CVE-2023-34048 added to CISA KEVOct 31 CISA federal deadline for CVE-2023-44487 passedOct 10 CVE-2023-44487 added to CISA KEVOct 4 CISA federal deadline for CVE-2023-4863 passedSep 13 CVE-2023-4863 added to CISA KEVMay 3 CISA federal deadline for CVE-2021-34527 passedApr 27 CISA federal deadline for CVE-2021-3156 passedApr 6 CVE-2021-3156 added to CISA KEVNov 17 CISA federal deadline for CVE-2021-22005 passedNov 3 CVE-2021-22005 added to CISA KEVSources Mar 31 Google Cloud Security Bulletins
Security Bulletins | Cloud Customer Care | Google Cloud Documentation
The following security bulletins are related to Google Cloud products.
original Part of the PlainSec briefing for 2026-04-03
Every edition of this story: Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes
More from today Vulnerabilities & Exploits
Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes Google Cloud disclosed multiple high-severity Linux kernel vulnerabilities affecting Container-Optimized OS nodes. These flaws allow privilege escalation, risking control over container hosts. The bulletins also cover medium to high severity vulnerabilities in Envoy Proxy and Istio, components used in service mesh architectures.
Additionally, Vertex AI Experiments has a bucket naming flaw (CVE-2026-2473 ) that could let attackers pre-create buckets to execute cross-tenant remote code, steal models, or poison data. Google states no customer action is needed for this issue.
1 source · Mar 31
CVEs in this update
332 CVEs
Across react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel, and related packages.
18 critical · 170 high · 117 medium · 9 low
20 in CISA KEV · 121 with EPSS above 1%
21 with functional or packaged public exploit code
Highest severity: CVE-2025-55182 · 10.0 CRITICAL
Highest EPSS: CVE-2021-22005 · 100%
Showing the top 10 by KEV, EPSS, and severity.
Timeline Mar 31 Reported by Google Cloud Security Bulletins Dec 12 CISA federal deadline for CVE-2025-55182 passedDec 5 CVE-2025-55182 added to CISA KEVOct 27 CISA federal deadline for CVE-2025-61882 passedOct 6 CVE-2025-61882 added to CISA KEVFeb 12 CISA federal deadline for CVE-2023-34048 passedJan 22 CVE-2023-34048 added to CISA KEVOct 31 CISA federal deadline for CVE-2023-44487 passedOct 10 CVE-2023-44487 added to CISA KEVOct 4 CISA federal deadline for CVE-2023-4863 passedSep 13 CVE-2023-4863 added to CISA KEVMay 3 CISA federal deadline for CVE-2021-34527 passedApr 27 CISA federal deadline for CVE-2021-3156 passedApr 6 CVE-2021-3156 added to CISA KEVNov 17 CISA federal deadline for CVE-2021-22005 passedNov 3 CVE-2021-22005 added to CISA KEVSources Mar 31 Google Cloud Security Bulletins
Security Bulletins | Cloud Customer Care | Google Cloud Documentation
The following security bulletins are related to Google Cloud products.
original Part of the PlainSec briefing for 2026-04-03
Every edition of this story: Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes
More from today