https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 03:34:12 +0000 https://cve.radiocsirt.org/vuln/cve-2020-8933 <p><strong>Affected:</strong> Google LLC guest-oslogin, google guest-oslogin</p> <p>A vulnerability in Google Cloud Platform&#39;s guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role &#34;roles/compute.osLogin&#34; to escalate privileges to root. Using the membership to the &#34;lxd&#34; group, an attacker can attach host devices and filesystems. Within an lxc container, it is possible to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the &#34;lxd&#34; user from the OS Login entry.</p> <p><strong>Affected:</strong> Google LLC guest-oslogin, google guest-oslogin</p> <p>A vulnerability in Google Cloud Platform&#39;s guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role &#34;roles/compute.osLogin&#34; to escalate privileges to root. Using the membership to the &#34;lxd&#34; group, an attacker can attach host devices and filesystems. Within an lxc container, it is possible to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the &#34;lxd&#34; user from the OS Login entry.</p> https://cve.radiocsirt.org/vuln/cve-2020-8933