CVE-2026-64777
Quick assessment
Affected
Apple container
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
恶意的构建节点对等方（builder peer）可能能够通过名称向主机请求一个位于构建上下文内的文件，并获取该名称解析后的实际文件内容，即使该名称解析的结果超出了构建上下文范围。此漏洞已在容器版本 1.2.0 中得到修复。
Possible ATT&CK Techniques 1 AI
T1083 · File and Directory Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-64777
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-64777
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-64777
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-64777 (1)
Same Patch Batch · Apple · 2026-08-20 · 4 CVEs total
| CVE-2026-64773 | Container 1.2.0内存耗尽漏洞 | |
| CVE-2026-43798 | swift-nio-ssh 栈溢出漏洞 | |
| CVE-2026-43678 | swift-nio 2.101.0前NIOWebSocket远程拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-64777
No comments yet