Gvisor

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-17	CVE-2018-20168	Improper Input Validation vulnerability in Google Gvisor Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application. network google CWE-20	4.3
2018-11-17	CVE-2018-19333	Unspecified vulnerability in Google Gvisor 20180823 pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the sandbox) via vectors involving IPC_RMID shmctl calls, because reference counting is mishandled. network low complexity google	7.5
2018-09-02	CVE-2018-16359	Unspecified vulnerability in Google Gvisor Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS. network google	7.1