CVE-2026-64777

4.3 Moyenne

Publiée le 20/08/2026 à 21:16 · Modifiée le 18/10/2026 à 22:10 · Analysée par le NVD · Source : product-security@apple.com

Description

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.

Traduire en français

Produits concernés

Apple container

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-22

Références

https://github.com/apple/container/security/advisories/GHSA-2v2q-4q35-h585 Vendor AdvisoryMitigation

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories