https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2713.htmlhttps://patchthecve.com/cve/CVE-2025-2713.htmlWed, 17 Jun 2026 09:07:29 +0000HIGH 7.8: Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.https://patchthecve.com/cve/CVE-2024-10603.htmlhttps://patchthecve.com/cve/CVE-2024-10603.htmlWed, 17 Jun 2026 06:56:01 +0000MEDIUM 5.3: Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.https://patchthecve.com/cve/CVE-2024-10026.htmlhttps://patchthecve.com/cve/CVE-2024-10026.htmlWed, 17 Jun 2026 06:54:47 +0000MEDIUM 5.3: A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.