[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-64437":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":195,"aliases":205,"duplicate_of":9,"upstream":208,"downstream":209,"duplicates":226,"related":227,"reserved_at":9,"published_at":238,"modified_at":239,"state":240,"summary":241,"references_raw":249,"kevs":284,"epss":285,"epss_history":288,"metrics":562,"affected":572},"CVE-2025-64437","KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not verify whether the launcher-sock is a symlink or a regular file. This oversight can be exploited, for example, to change the ownership of arbitrary files on the host node to the unprivileged user with UID 107 (the same user used by virt-launcher) thus, compromising the CIA (Confidentiality, Integrity and Availability) of data on the host. To successfully exploit this vulnerability, an attacker should be in control of the file system of the virt-launcher pod. This vulnerability is fixed in 1.5.3 and 1.6.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","weakness","Draft","Base","Medium",[20,101,162,191],{"id":21,"name":22,"techniques":23},"CAPEC-132","Symlink Attack",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1547.009","Shortcut Modification",[28,31],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,48,52,57,62,67,72,77,81,85,89,93,97],{"id":36,"name":37,"tactic":38},"D3-FA","File Analysis",{"name":39},"Detect",{"id":41,"name":42,"tactic":43},"D3-FIM","File Integrity Monitoring",{"name":39},{"id":45,"name":46,"tactic":47},"D3-DA","Dynamic Analysis",{"name":39},{"id":49,"name":50,"tactic":51},"D3-EFA","Emulated File Analysis",{"name":39},{"id":53,"name":54,"tactic":55},"D3-FEV","File Eviction",{"name":56},"Evict",{"id":58,"name":59,"tactic":60},"D3-DF","Decoy File",{"name":61},"Deceive",{"id":63,"name":64,"tactic":65},"D3-FE","File Encryption",{"name":66},"Harden",{"id":68,"name":69,"tactic":70},"D3-RF","Restore File",{"name":71},"Restore",{"id":73,"name":74,"tactic":75},"D3-CF","Content Filtering",{"name":76},"Isolate",{"id":78,"name":79,"tactic":80},"D3-LFP","Local File Permissions",{"name":76},{"id":82,"name":83,"tactic":84},"D3-RFAM","Remote File Access Mediation",{"name":76},{"id":86,"name":87,"tactic":88},"D3-CQ","Content Quarantine",{"name":76},{"id":90,"name":91,"tactic":92},"D3-CM","Content Modification",{"name":76},{"id":94,"name":95,"tactic":96},"D3-EAL","Executable Allowlisting",{"name":76},{"id":98,"name":99,"tactic":100},"D3-EDL","Executable Denylisting",{"name":76},{"id":102,"name":103,"techniques":104},"CAPEC-17","Using Malicious Files",[105,142],{"id":106,"name":107,"tactics":108,"countermeasures":120},"T1574.005","Executable Installer File Permissions Weakness",[109,110,111,114,117],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},"TA0030","Defense Evasion",{"id":115,"name":116},"TA0005","Stealth",{"id":118,"name":119},"TA0104","Execution",[121,126,130,134,138],{"id":122,"name":123,"tactic":124},"D3-SWI","Software Inventory",{"name":125},"Model",{"id":127,"name":128,"tactic":129},"D3-AVE","Asset Vulnerability Enumeration",{"name":125},{"id":131,"name":132,"tactic":133},"D3-SBV","Service Binary Verification",{"name":39},{"id":135,"name":136,"tactic":137},"D3-SU","Software Update",{"name":66},{"id":139,"name":140,"tactic":141},"D3-RS","Restore Software",{"name":71},{"id":143,"name":144,"tactics":145,"countermeasures":151},"T1574.010","Services File Permissions Weakness",[146,147,148,149,150],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},{"id":115,"name":116},{"id":118,"name":119},[152,154,156,158,160],{"id":122,"name":123,"tactic":153},{"name":125},{"id":127,"name":128,"tactic":155},{"name":125},{"id":131,"name":132,"tactic":157},{"name":39},{"id":135,"name":136,"tactic":159},{"name":66},{"id":139,"name":140,"tactic":161},{"name":71},{"id":163,"name":164,"techniques":165},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[166,173,180],{"id":167,"name":168,"tactics":169,"countermeasures":172},"T1027.006","HTML Smuggling",[170,171],{"id":112,"name":113},{"id":115,"name":116},[],{"id":174,"name":175,"tactics":176,"countermeasures":179},"T1027.009","Embedded Payloads",[177,178],{"id":112,"name":113},{"id":115,"name":116},[],{"id":181,"name":182,"tactics":183,"countermeasures":186},"T1564.009","Resource Forking",[184,185],{"id":112,"name":113},{"id":115,"name":116},[187],{"id":188,"name":189,"tactic":190},"D3-FFV","File Format Verification",{"name":76},{"id":192,"name":193,"techniques":194},"CAPEC-76","Manipulating Web Input to File System Calls",[],[196],{"_key":197,"name":198,"source":199,"url":200,"maturity":201,"reliability_score":202,"verified":203,"type":9,"platforms":204,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_KUBEVIRT_KUBEVIRT","Kubevirt","github","https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364","poc",0.3,false,[],[206,207],"GHSA-2r4r-5x78-mvqf","GO-2025-4102",[],[210,212,214,216,218,220,222,224],{"_key":211},"SUSE-SU-2025:4330-1",{"_key":213},"SUSE-SU-2026:20551-1",{"_key":215},"SUSE-SU-2026:20610-1",{"_key":217},"OPENSUSE-SU-2025:15772-1",{"_key":219},"OPENSUSE-SU-2026:20281-1",{"_key":221},"OPENSUSE-SU-2026:11057-1",{"_key":223},"OPENSUSE-SU-2026:11091-1",{"_key":225},"SUSE-SU-2026:20571-1",[],[228,229,230,231,232,233,234,235,236],{"_key":211},{"_key":213},{"_key":215},{"_key":217},{"_key":219},{"_key":221},{"_key":223},{"_key":225},{"_key":237},"CGA-M2M2-RM3C-886R","2025-11-07T23:04:10.913Z","2025-11-10T18:50:16.445Z","Analyzed",{"cisa_kev":203,"cisa_ransomware":203,"cisa_vendor":9,"epss_severity":242,"epss_score":243,"severity":244,"severity_score":245,"severity_version":246,"severity_source":247,"severity_vector":248,"severity_status":240},"low",0.0021,"medium",5,"v3.1","cve.org","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",[250,261,267,271,275,279],{"url":251,"sources":252,"tags":255},"https://github.com/kubevirt/kubevirt/security/advisories/GHSA-2r4r-5x78-mvqf",[247,253,254],"nvd","osv_go",[256,257,258,259,260],"X Refsource CONFIRM","Exploit","Vendor Advisory","WEB","Advisory",{"url":262,"sources":263,"tags":264},"https://github.com/kubevirt/kubevirt/commit/3ce9f41c54d04a65f10b23a46771391c00659afb",[247,253,254],[265,266,259],"X Refsource MISC","Patch",{"url":268,"sources":269,"tags":270},"https://github.com/kubevirt/kubevirt/commit/8644dbe0d04784b0bfa8395b91ecbd6001f88f6b",[247,253,254],[265,266,259],{"url":272,"sources":273,"tags":274},"https://github.com/kubevirt/kubevirt/commit/f59ca63133f25de8fceb3e2a0e5cc0b7bdb6a265",[247,253,254],[265,266,259],{"url":276,"sources":277,"tags":278},"https://nvd.nist.gov/vuln/detail/CVE-2025-64437",[254],[260],{"url":280,"sources":281,"tags":282},"https://github.com/kubevirt/kubevirt",[254],[283],"PACKAGE",[],{"date":286,"score":243,"percentile":287},"2026-07-05",0.11273,[289,293,296,299,302,305,309,312,315,318,321,324,327,330,334,337,340,343,346,349,352,356,359,362,365,368,371,374,377,380,382,385,389,392,395,398,401,404,407,410,413,416,420,423,426,429,432,435,438,441,444,446,449,452,455,458,462,465,468,471,474,477,480,483,485,488,491,494,498,501,504,507,510,513,516,519,522,525,528,531,534,537,540,543,546,549,551,554,557,560],{"date":290,"score":291,"percentile":292},"2025-11-08",0.00012,0.01148,{"date":294,"score":291,"percentile":295},"2025-11-09",0.01147,{"date":297,"score":291,"percentile":298},"2025-11-10",0.01137,{"date":300,"score":291,"percentile":301},"2025-11-11",0.0114,{"date":303,"score":291,"percentile":304},"2025-11-12",0.01139,{"date":306,"score":307,"percentile":308},"2025-11-13",0.00015,0.02321,{"date":310,"score":307,"percentile":311},"2025-11-14",0.02334,{"date":313,"score":307,"percentile":314},"2025-11-15",0.02358,{"date":316,"score":307,"percentile":317},"2025-11-16",0.0236,{"date":319,"score":307,"percentile":320},"2025-11-17",0.02346,{"date":322,"score":307,"percentile":323},"2025-11-18",0.01435,{"date":325,"score":307,"percentile":326},"2025-11-19",0.01454,{"date":328,"score":307,"percentile":329},"2025-11-20",0.01473,{"date":331,"score":332,"percentile":333},"2025-11-21",0.00019,0.03906,{"date":335,"score":332,"percentile":336},"2025-11-22",0.03909,{"date":338,"score":332,"percentile":339},"2025-11-23",0.03901,{"date":341,"score":332,"percentile":342},"2025-11-24",0.03884,{"date":344,"score":332,"percentile":345},"2025-11-25",0.03877,{"date":347,"score":332,"percentile":348},"2025-11-26",0.03816,{"date":350,"score":332,"percentile":351},"2025-11-27",0.03829,{"date":353,"score":354,"percentile":355},"2025-11-28",0.00024,0.05209,{"date":357,"score":354,"percentile":358},"2025-11-29",0.05253,{"date":360,"score":354,"percentile":361},"2025-11-30",0.05251,{"date":363,"score":354,"percentile":364},"2025-12-01",0.05342,{"date":366,"score":354,"percentile":367},"2025-12-02",0.05357,{"date":369,"score":354,"percentile":370},"2025-12-03",0.05377,{"date":372,"score":354,"percentile":373},"2025-12-04",0.05324,{"date":375,"score":354,"percentile":376},"2025-12-05",0.05388,{"date":378,"score":354,"percentile":379},"2025-12-06",0.05401,{"date":381,"score":354,"percentile":379},"2025-12-07",{"date":383,"score":354,"percentile":384},"2025-12-08",0.05409,{"date":386,"score":387,"percentile":388},"2025-12-09",0.00026,0.0622,{"date":390,"score":387,"percentile":391},"2025-12-10",0.06294,{"date":393,"score":387,"percentile":394},"2025-12-11",0.06291,{"date":396,"score":387,"percentile":397},"2025-12-12",0.06318,{"date":399,"score":387,"percentile":400},"2025-12-13",0.06352,{"date":402,"score":387,"percentile":403},"2025-12-14",0.06319,{"date":405,"score":387,"percentile":406},"2025-12-15",0.06297,{"date":408,"score":387,"percentile":409},"2025-12-16",0.06323,{"date":411,"score":387,"percentile":412},"2025-12-17",0.06409,{"date":414,"score":387,"percentile":415},"2025-12-18",0.06465,{"date":417,"score":418,"percentile":419},"2025-12-19",0.00035,0.09936,{"date":421,"score":418,"percentile":422},"2025-12-20",0.09928,{"date":424,"score":418,"percentile":425},"2025-12-21",0.09915,{"date":427,"score":418,"percentile":428},"2025-12-22",0.0989,{"date":430,"score":418,"percentile":431},"2025-12-23",0.09817,{"date":433,"score":418,"percentile":434},"2025-12-24",0.09818,{"date":436,"score":418,"percentile":437},"2025-12-25",0.09903,{"date":439,"score":418,"percentile":440},"2025-12-26",0.09895,{"date":442,"score":418,"percentile":443},"2025-12-27",0.09869,{"date":445,"score":418,"percentile":437},"2025-12-28",{"date":447,"score":418,"percentile":448},"2025-12-29",0.09867,{"date":450,"score":418,"percentile":451},"2025-12-30",0.09848,{"date":453,"score":418,"percentile":454},"2025-12-31",0.099,{"date":456,"score":418,"percentile":457},"2026-01-01",0.09942,{"date":459,"score":460,"percentile":461},"2026-01-02",0.00028,0.07311,{"date":463,"score":460,"percentile":464},"2026-01-03",0.07306,{"date":466,"score":460,"percentile":467},"2026-01-04",0.07238,{"date":469,"score":460,"percentile":470},"2026-01-05",0.07189,{"date":472,"score":460,"percentile":473},"2026-01-06",0.07183,{"date":475,"score":460,"percentile":476},"2026-01-07",0.07206,{"date":478,"score":460,"percentile":479},"2026-01-08",0.07266,{"date":481,"score":460,"percentile":482},"2026-01-09",0.07279,{"date":484,"score":460,"percentile":464},"2026-01-10",{"date":486,"score":460,"percentile":487},"2026-01-11",0.07293,{"date":489,"score":460,"percentile":490},"2026-01-12",0.07263,{"date":492,"score":460,"percentile":493},"2026-01-13",0.07246,{"date":495,"score":496,"percentile":497},"2026-01-14",0.00029,0.0774,{"date":499,"score":496,"percentile":500},"2026-01-15",0.07738,{"date":502,"score":496,"percentile":503},"2026-01-16",0.07759,{"date":505,"score":496,"percentile":506},"2026-01-17",0.0777,{"date":508,"score":496,"percentile":509},"2026-01-18",0.0775,{"date":511,"score":496,"percentile":512},"2026-01-19",0.07719,{"date":514,"score":496,"percentile":515},"2026-01-20",0.07678,{"date":517,"score":496,"percentile":518},"2026-01-21",0.07663,{"date":520,"score":496,"percentile":521},"2026-01-22",0.0765,{"date":523,"score":496,"percentile":524},"2026-01-23",0.07745,{"date":526,"score":496,"percentile":527},"2026-01-24",0.07792,{"date":529,"score":496,"percentile":530},"2026-01-25",0.07777,{"date":532,"score":496,"percentile":533},"2026-01-26",0.07743,{"date":535,"score":496,"percentile":536},"2026-01-27",0.0773,{"date":538,"score":496,"percentile":539},"2026-01-28",0.07694,{"date":541,"score":496,"percentile":542},"2026-01-29",0.07673,{"date":544,"score":496,"percentile":545},"2026-01-30",0.07684,{"date":547,"score":496,"percentile":548},"2026-01-31",0.07702,{"date":550,"score":496,"percentile":536},"2026-02-01",{"date":552,"score":496,"percentile":553},"2026-02-02",0.07714,{"date":555,"score":496,"percentile":556},"2026-02-03",0.07671,{"date":558,"score":496,"percentile":559},"2026-02-04",0.07693,{"date":561,"score":496,"percentile":524},"2026-02-05",[563,568,570],{"source":247,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":564,"cvss_v4_0":9},{"baseScore":245,"baseSeverity":565,"vectorString":248,"impactScore":566,"exploitabilityScore":567},"MEDIUM",6.2,2.1,{"source":253,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":569,"cvss_v4_0":9},{"baseScore":245,"baseSeverity":565,"vectorString":248,"impactScore":566,"exploitabilityScore":567},{"source":254,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":571,"cvss_v4_0":9},{"baseScore":245,"baseSeverity":9,"vectorString":248,"impactScore":566,"exploitabilityScore":567},[573,594],{"ecosystem":574,"name":575,"vendor":576,"product":577,"cpe_part":9,"purl_type":578,"purl_namespace":576,"purl_name":577,"source":9,"versions":579},"Go","kubevirt.io/kubevirt","kubevirt.io","kubevirt","golang",[580,586,591],{"version":581,"is_range":582,"range_type":583,"version_start":9,"version_start_type":9,"version_end":584,"version_end_type":585,"fixed_in":9},"lt1_5_3",true,"semver","1.5.3","excluding",{"version":587,"is_range":582,"range_type":583,"version_start":588,"version_start_type":589,"version_end":590,"version_end_type":585,"fixed_in":9},"gte1_6_0_alpha_0_lt1_6_1","1.6.0-alpha.0","including","1.6.1",{"version":592,"is_range":582,"range_type":583,"version_start":588,"version_start_type":589,"version_end":593,"version_end_type":585,"fixed_in":9},"gte1_6_0_alpha_0_lt1_6_0_beta_0_0_20250801202148_3ce9f41c54d0","1.6.0-beta.0.0.20250801202148-3ce9f41c54d0",{"ecosystem":9,"name":577,"vendor":577,"product":577,"cpe_part":595,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":596},"a",[597,599,602],{"version":598,"is_range":582,"range_type":247,"version_start":588,"version_start_type":589,"version_end":590,"version_end_type":585,"fixed_in":9},">= 1.6.0-alpha.0, \u003C 1.6.1",{"version":600,"is_range":582,"range_type":601,"version_start":9,"version_start_type":9,"version_end":584,"version_end_type":585,"fixed_in":9},"lt1.5.3","cpe",{"version":603,"is_range":203,"range_type":601,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.6.0"]