crun CVE-2026-88264

Out-of-bounds read in the GnuTLS DTLS handshake reassembly logic lets remote unauthenticated attackers trigger an intege

Privilege escalation via authentication bypass in libssh affects servers that enable GSSAPIKeyExchange, where the gssapi

Sandbox escape in bubblewrap prior to 0.12.0 allows a local, low-privileged user to write files or directories to arbitr

Double-free memory corruption in libxml2's SAX parser Python bindings allows a remote attacker to crash Python applicati

Information disclosure and denial of service in GnuTLS (libgnutls) let a remote, unauthenticated attacker trigger a heap

Here is the multi-source synthesis as a single JSON object: ```json { "product_name": "GnuTLS", "summary": "Certifi

Command injection in rpm's `rpmbuild -t*` subcommand allows arbitrary command execution with build-user privileges when

Command injection in rpmuncompress allows a local attacker to execute arbitrary commands under the invoking user's conte

Privilege escalation in util-linux's nsenter --join-cgroup option allows an unprivileged local user to move and terminat

Out-of-bounds write in GNU binutils' BFD library (bfd/elf32-dlx.c) lets a crafted ELF/DLX object file corrupt memory and

Container escape in crun >= 1.29, when built with libkrun and started rootful with passt networking (krun.use_passt), al

Privilege escalation in the `openvt -u` utility allows a local low-privileged attacker to obtain passwordless root login