← CVE Intelligence

CVE-2021-3626

Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts PUBLISHED

Description (CNA)

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

Affected (CNA)

Vendor / productVersions
Canonical / Multipassaffected unspecified before 1.7.0

CWE

CWE-73, CWE-284

References

ADP enrichment

CVE

No English description supplied.