8.8
High
CVE-2021-3626 The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket…
Description
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multipass 1.7 | earliest → < 1.7.0 | 1.7.0 |
Other CVEs of Multipass
The 5 CVEs of Multipass →
CVE-2026-49237
An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for…
7.8
High
CVE-2026-49238
An issue was discovered in Canonical Multipass before version 1.16.3
8.4
High
CVE-2025-5199
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker…
7.3
High
CVE-2021-3747
The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with…
8.8
High