The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentication and/or authorization operations.....
9.1CVSS
9.1AI Score
0.001EPSS
The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect...
8.8CVSS
7.6AI Score
0.0004EPSS
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege...
8.8CVSS
8.5AI Score
0.0004EPSS