Login Request a demo
MU
Product
Multipass
by Canonical · last CVE May 28, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 5Medium 0Low 0
Severity
All severities5Critical0High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Multipass to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3626
8.8
0%
Oct 1
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest,…
Affected: before 1.7.0
CVE-2026-49238
8.4
1%
May 28
SFTP Server VM Escape in Canonical Multipass
Affected: before 1.16.3
CVE-2026-49237
7.8
0%
May 28
Local Privilege Escalation in Canonical Multipass
Affected: before 1.16.3
CVE-2025-5199
7.8
0%
Jul 12
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with…
Affected: before 1.16.0
CVE-2021-3747
7.8
0%
Oct 1
The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect owner
Affected: 1.7.0 before 1.7.2
Showing 5