CVE-2022-2995

score

<0.1

cvss

7.1

epss

0.4%

published

2022-09-19

kev added

—

first seen

2026-10-21

CRI-O container engine contains incorrect handling of supplementary groups, letting attackers with direct container access potentially disclose sensitive information or modify data, exploit requires attacker to execute code within the container.