Unverified50% confidenceFactExact time
Kernel privilege-escalation vulnerabilities (such as Dirty COW and the runc escape vulnerability CVE-2019-5736) may be exploited to break out of the container boundary and thereby access the host machine or other tenants' containers.
1
Sources
50%
Confidence
Long-term
Relevance
11/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHistorical container escape vulnerabilities include Dirty COW in 2016 (CVE-2016-5195), the runc vulnerability in 2019 (CVE-2019-5736), and CVE-2022-0185 in 2022.73% similarVerifiedCVE-2019-5736 (the runc vulnerability) allows a malicious container to overwrite the runc binary on the host machine, achieving container escape.68% similarUnverifiedHistorically disclosed container escape vulnerabilities (such as runc CVE-2019-5736 and runC Leaky Vessels) all exploited flaws in the shared kernel.68% similarUnverifiedKnown paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.67% similarUnverifiedHistorically, several well-known escape vulnerabilities (such as Dirty COW, Dirty Pipe, and the overlayfs privilege escalation series) all stemmed from kernel subsystem flaws.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1140115API
curl https://kongchang.com/api/v1/knowledge/claims/1140115MCP
get_claim(id=1140115)