{"metadata": {"vulnerability": "cve-2026-47243", "count": 28, "kinds": {"milestone": 8, "sighting": 6, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-05-18T22:54:18.272Z", "date_only": false, "value": "2026-05-18T22:54:18.272Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-47243", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-21T18:26:35Z", "date_only": false, "value": "2026-05-21T18:26:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "df032152-aa17-45ec-8d1f-3ffba3ac87de", "url": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-21T19:08:18.829Z", "date_only": false, "value": "2026-05-21T19:08:18.829414Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf4lcuoc42m", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "d9f78ccd-9518-42e2-92e6-30967aa91bcb", "content": "CVE-2026-47243: Kata Containers runtime-rs 3.30: virtiofsd symlink escape", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf4lcuoc42m"}, {"timestamp": "2026-05-21T20:46:27.625Z", "date_only": false, "value": "2026-05-21T20:46:27.625197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mmfc2stmd42a", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "232d0f86-46d0-4cb7-bb99-b4017a1575df", "content": "CVE-2026-47243: Kata Containers guest-root to host-root escape via virtiofs\nDiscussion | lobsters | Author: 7tehdt3cnw6kir6o", "url": "https://bsky.app/profile/news.karthihegde.dev/post/3mmfc2stmd42a"}, {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "modified"}, {"timestamp": "2026-05-29T11:11:28Z", "date_only": false, "value": "2026-05-29T11:11:28Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2527", "record": "OESA-2026-2527", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-29T11:11:28Z", "date_only": false, "value": "2026-05-29T11:11:28Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2528", "record": "OESA-2026-2528", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-05T11:11:30Z", "date_only": false, "value": "2026-06-05T11:11:30Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2557", "record": "OESA-2026-2557", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-06T11:11:28Z", "date_only": false, "value": "2026-08-06T11:11:28Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2527", "record": "OESA-2026-2527", "field": "modified"}, {"timestamp": "2026-08-06T11:11:28Z", "date_only": false, "value": "2026-08-06T11:11:28Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2528", "record": "OESA-2026-2528", "field": "modified"}, {"timestamp": "2026-08-06T11:11:30Z", "date_only": false, "value": "2026-08-06T11:11:30Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2557", "record": "OESA-2026-2557", "field": "modified"}, {"timestamp": "2026-08-07T21:36:49.979Z", "date_only": false, "value": "2026-08-07T21:36:49.979Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-47243", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-07T21:36:49.979Z", "date_only": false, "value": "2026-08-07T21:36:49.979Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-47243", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T22:16:58.753Z", "date_only": false, "value": "2026-08-07T22:16:58.753", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-47243", "record": "FKIE_CVE-2026-47243", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-07T22:17:12.604Z", "date_only": false, "value": "2026-08-07T22:17:12.604Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2026-47243", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T22:52:11.038Z", "date_only": false, "value": "2026-08-07T22:52:11.038183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7piuosplgprvk", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "359acb14-378e-4c3a-b7a4-dd3544e9adc7", "content": "CVE-2026-47243 - Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs\nCVE ID : CVE-2026-47243\n \n Published : Aug. 7, 2026, 9:36 p.m. | 47\u00a0minutes ago\n \n Description : Kata Containers is an open source project focusing on a standard implementation of lightw...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7piuosplgprvk"}, {"timestamp": "2026-08-07T23:16:05.068Z", "date_only": false, "value": "2026-08-07T23:16:05.068101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjos6brjn2u", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "6ec122f2-36ff-4219-a6fb-ce967c2e09d2", "content": "CVE-2026-47243 - kata-containers\nAn attacker with root access inside a Kata Containers guest can create symbolic links on the host that allow them to execute code as the host root user. This is a risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#katacontainers #Golang #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3msjos6brjn2u"}, {"timestamp": "2026-08-08T00:49:16.766Z", "date_only": false, "value": "2026-08-08T00:49:16.766199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msjtwoxz4s2b", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "7aa3e8e5-d483-464b-a9f2-8424703167e4", "content": "Guest Privilege Becomes Host Ruin, Thanks for the Elegant Disaster\nPANIC 84% | Lag 0.0h | CVE-2026-47243 lets an attacker with root inside a Kata Containers guest create host symlinks and ex\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msjtwoxz4s2b"}, {"timestamp": "2026-08-09T01:02:08Z", "date_only": false, "value": "2026-08-09T01:02:08.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-47243", "record": "MSRC_CVE-2026-47243", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-09T01:02:08Z", "date_only": false, "value": "2026-08-09T01:02:08.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-47243", "record": "MSRC_CVE-2026-47243", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-09T01:02:08Z", "date_only": false, "value": "2026-08-09T01:02:08.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-47243", "record": "MSRC_CVE-2026-47243", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-09T07:11:19.440Z", "date_only": false, "value": "2026-08-09T07:11:19.440Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-47243", "record": "MSRC_CVE-2026-47243", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-10T13:33:45.456Z", "date_only": false, "value": "2026-08-10T13:33:45.456561Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-47243", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-10T13:33:45.456Z", "date_only": false, "value": "2026-08-10T13:33:45.456561Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-47243", "record": "FKIE_CVE-2026-47243", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-10T13:34:09.469Z", "date_only": false, "value": "2026-08-10T13:34:09.469Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-47243", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T13:34:09.469Z", "date_only": false, "value": "2026-08-10T13:34:09.469Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-47243", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T21:02:22.660Z", "date_only": false, "value": "2026-09-09T21:02:22.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-47243", "record": "FKIE_CVE-2026-47243", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T04:35:08.476Z", "anchors": {"origin": {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-05-21T18:26:35Z", "date_only": false, "value": "2026-05-21T18:26:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "df032152-aa17-45ec-8d1f-3ffba3ac87de", "url": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -534206.0, "hours": -148.39055555555555, "days": -6.182939814814815, "min_seconds": -534206.0, "max_seconds": -534206.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-21T18:26:35Z", "date_only": false, "value": "2026-05-21T18:26:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "df032152-aa17-45ec-8d1f-3ffba3ac87de", "url": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13326307.476157, "hours": 3701.752076710278, "days": 154.23966986292825, "min_seconds": 13326307.476157, "max_seconds": 13326307.476157, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T22:50:01Z", "date_only": false, "value": "2026-05-27T22:50:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GV2-CFFP-J227", "record": "GHSA-2GV2-CFFP-J227", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T04:35:08.476Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 13860513.476157, "hours": 3850.1426322658335, "days": 160.42260967774305, "min_seconds": 13860513.476157, "max_seconds": 13860513.476157, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-21T18:26:35Z", "date_only": false, "value": "2026-05-21T18:26:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "record": "CVE-2026-47243", "field": "creation_timestamp", "uuid": "df032152-aa17-45ec-8d1f-3ffba3ac87de", "url": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T04:35:08.476Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}