Vulnerabilità ed exploit
Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes Google Cloud disclosed multiple high-severity Linux kernel vulnerabilities affecting Container-Optimized OS nodes. These flaws allow privilege escalation, risking control over container hosts. The bulletins also cover medium to high severity vulnerabilities in Envoy Proxy and Istio, components used in service mesh architectures.
Additionally, Vertex AI Experiments has a bucket naming flaw (CVE-2026-2473 ) that could let attackers pre-create buckets to execute cross-tenant remote code, steal models, or poison data. Google states no customer action is needed for this issue.
1 fonte · 31 mar
CVE in questo aggiornamento
332 CVE
Distribuite tra react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel e altri pacchetti correlati.
18 critiche · 170 alte · 117 medie · 9 basse
22 in CISA KEV · 122 con EPSS sopra 1%
21 con codice di exploit pubblico funzionante o integrato
Severità più alta: CVE-2025-55182 · 10.0 CRITICAL
EPSS più alto: CVE-2021-22005 · 100%
Mostriamo le prime 10 per KEV, EPSS e severità.
Cronologia 31 mar Segnalato da Google Cloud Security Bulletins 12 dic Scadenza federale CISA per CVE-2025-55182 superata5 dic CVE-2025-55182 aggiunto al KEV CISA27 ott Scadenza federale CISA per CVE-2025-61882 superata6 ott CVE-2025-61882 aggiunto al KEV CISA12 feb Scadenza federale CISA per CVE-2023-34048 superata22 gen CVE-2023-34048 aggiunto al KEV CISA31 ott Scadenza federale CISA per CVE-2023-44487 superata10 ott CVE-2023-44487 aggiunto al KEV CISA4 ott Scadenza federale CISA per CVE-2023-4863 superata13 set CVE-2023-4863 aggiunto al KEV CISA3 mag Scadenza federale CISA per CVE-2021-34527 superata27 apr Scadenza federale CISA per CVE-2021-3156 superata6 apr CVE-2021-3156 aggiunto al KEV CISA17 nov Scadenza federale CISA per CVE-2021-22005 superata3 nov CVE-2021-22005 aggiunto al KEV CISAFonti 31 mar Google Cloud Security Bulletins
Security Bulletins | Cloud Customer Care | Google Cloud Documentation
The following security bulletins are related to Google Cloud products.
originale Part of the PlainSec briefing for 2026-04-03
Every edition of this story: Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes
Altro da oggi Vulnerabilità ed exploit
Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes Google Cloud disclosed multiple high-severity Linux kernel vulnerabilities affecting Container-Optimized OS nodes. These flaws allow privilege escalation, risking control over container hosts. The bulletins also cover medium to high severity vulnerabilities in Envoy Proxy and Istio, components used in service mesh architectures.
Additionally, Vertex AI Experiments has a bucket naming flaw (CVE-2026-2473 ) that could let attackers pre-create buckets to execute cross-tenant remote code, steal models, or poison data. Google states no customer action is needed for this issue.
1 fonte · 31 mar
CVE in questo aggiornamento
332 CVE
Distribuite tra react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel e altri pacchetti correlati.
18 critiche · 170 alte · 117 medie · 9 basse
22 in CISA KEV · 122 con EPSS sopra 1%
21 con codice di exploit pubblico funzionante o integrato
Severità più alta: CVE-2025-55182 · 10.0 CRITICAL
EPSS più alto: CVE-2021-22005 · 100%
Mostriamo le prime 10 per KEV, EPSS e severità.
Cronologia 31 mar Segnalato da Google Cloud Security Bulletins 12 dic Scadenza federale CISA per CVE-2025-55182 superata5 dic CVE-2025-55182 aggiunto al KEV CISA27 ott Scadenza federale CISA per CVE-2025-61882 superata6 ott CVE-2025-61882 aggiunto al KEV CISA12 feb Scadenza federale CISA per CVE-2023-34048 superata22 gen CVE-2023-34048 aggiunto al KEV CISA31 ott Scadenza federale CISA per CVE-2023-44487 superata10 ott CVE-2023-44487 aggiunto al KEV CISA4 ott Scadenza federale CISA per CVE-2023-4863 superata13 set CVE-2023-4863 aggiunto al KEV CISA3 mag Scadenza federale CISA per CVE-2021-34527 superata27 apr Scadenza federale CISA per CVE-2021-3156 superata6 apr CVE-2021-3156 aggiunto al KEV CISA17 nov Scadenza federale CISA per CVE-2021-22005 superata3 nov CVE-2021-22005 aggiunto al KEV CISAFonti 31 mar Google Cloud Security Bulletins
Security Bulletins | Cloud Customer Care | Google Cloud Documentation
The following security bulletins are related to Google Cloud products.
originale Part of the PlainSec briefing for 2026-04-03
Every edition of this story: Google Cloud Linux Kernel Flaws Enable Privilege Escalation on Container Nodes
Altro da oggi