CVE-2021-3626: Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts

First published: Thu Jul 01 2021(Updated: )

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

Credit: security@ubuntu.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/weakness
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/title
• agent/severity
• agent/author
• agent/remedy
• agent/last-modified-date
• agent/references
• agent/tags
• agent/description
• agent/first-publish-date
• agent/event
• vendor/canonical
• canonical/canonical multipass
• vendor/microsoft
• canonical/microsoft windows