CVE intelligence

CVE-2022-27651

Vulnerability intelligence

Published Apr 4, 2022Sources checked Nov 9, 2026

6.8MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2022-27651 and is rated Medium severity with a CVSS score of 6.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Aug 12, 2026

CBL-Mariner Releases

Vendor-listed releases

1.21.7-2

CISA KEVNot listedBased on the latest collected catalog

EPSS1.3%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2022-27651?

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

This has the potential to impact confidentiality and integrity.

Source: NVD