CWE-363

CVEs per yearBy the year they were published

1. 20181
2. 20221
3. 20242
4. 20256
5. 20265

Newest CVEs

• CVE-2026-112940

  filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

  tox-dev · filelock

  High7.1
• CVE-2026-112914

  filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

  tox-dev · filelock

  Medium5.3
• CVE-2026-91203

  Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

  Red Hat · Red Hat Enterprise Linux 10

  Medium6.0
• CVE-2026-91205

  Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race

  Red Hat · Red Hat Enterprise Linux 9

  Medium6.0
• CVE-2026-71125

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily…

  Oracle Corporation · Oracle VM VirtualBox

  Medium6.1
• CVE-2025-13492

  HP Image Assistant - Potential Escalation of Privilege

  HP Inc · HP Image Assistant

  Medium5.4
• CVE-2025-52881

  runc: LSM labels can be bypassed with malicious config using dummy procfs files

  opencontainers · runc

  High7.3
• CVE-2025-52565

  container escape due to /dev/console mount and related races

  opencontainers · runc

  High8.4
• CVE-2025-31133

  runc container escape via "masked path" abuse due to mount race conditions

  opencontainers · runc

  High7.3
• CVE-2025-62596

  youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

  youki-dev · youki

  High7.3

Vendors it comes up for most

1. opencontainers4
2. Red Hat2
3. tox-dev2
4. youki-dev2
5. HP Inc1
6. McAfee1
7. Oracle Corporation1
8. pterodactyl1
9. rust-lang1