VendorsCanonicalmultipassany version
Vulnerabilities

Canonical Multipass any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2021-3626
Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts
Published 2021-10-01 · Modified
8.8EPSS 0.002
CVE-2021-3747
MacOS version of Multipass incorrect owner for application directory
Published 2021-10-01 · Modified
8.8EPSS 0.002
CVE-2026-49238
SFTP Server VM Escape in Canonical Multipass
Published 2026-05-28 · Analyzed
8.4EPSS 0.005
CVE-2025-5199
LPE on Multipass for macOS
Published 2025-07-11 · Analyzed
7.8EPSS 0.002
CVE-2026-49237
Local Privilege Escalation in Canonical Multipass
Published 2026-05-28 · Analyzed
7.8EPSS 0.001