Critical
CVE-2025-41118
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent…
Tag: Google Container-Optimized OS (COS)
All CVEs associated with "Google Container-Optimized OS (COS)". Page 1/1 • 18 CVEs.
About “Google Container-Optimized OS (COS)”
A curated feed of “Google Container-Optimized OS (COS)”-related CVEs appears below. We currently track 18 CVEs for this tag (all time). In the last 365 days, 6 were published. Average CVSS is 6.5 (all time; 7.5 over 365d), and 50% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), CWE-732 - Incorrect Permission Assignment for Critical Resource.
In our taxonomy this topic maps to a MODERATE impact class. Issues here typically affect operating system packages or kernels. Plan reboots or service restarts and coordinate rollouts across fleets. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: cos
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| cos-125 | cos-125-19216-395-55 | LTS | ||
| cos-121 | cos-121-18867-381-148 | LTS | ||
| cos-117 | cos-117-18613-613-29 | Soon | LTS | |
| cos-113 | cos-113-18244-582-104 | Expired | LTS | |
| cos-109 | cos-109-17800-570-50 | Expired | LTS | |
| cos-105 | cos-105-17412-535-98 | Expired | LTS | |
| cos-101 | cos-101-17162-528-64 | Expired | LTS | |
| cos-97 | cos-97-16919-450-41 | Expired | LTS | |
| cos-93 | cos-93-16623-461-42 | Expired | LTS | |
| cos-89 | cos-89-16108-798-22 | Expired | LTS | |
| cos-85 | cos-85-13310-1498-13 | Expired | LTS | |
| cos-81 | cos-81-12871-1317-8 | Expired | LTS | |
| cos-77 | cos-77-12371-1109-0 | Expired | LTS | |
| cos-73 | cos-73-11647-656-0 | Expired | LTS | |
| cos-69 | cos-69-10895-385-0 | Expired | LTS |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “Google Container-Optimized OS (COS)” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2026-04-15
2026-04-14
High
CVE-2026-5756
Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading to mass data exfil…
2026-03-30
High
CVE-2026-5150
A security vulnerability has been detected in code-projects Accounting System 1.0. This issue affects some unknown processing of the file /viewin_costumer.php of the component Parameter Handler. Such…
2026-03-29
High
CVE-2026-5034
A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /edit_costumer.php of the component Parameter Handler. This manipulation…
High
CVE-2026-5033
A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_costumer.php of the component Parameter Handler. The…
2026-03-26
Medium
CVE-2026-4836
A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the file /my_account/delete.php. Performing a manipulation of the argument cos_id r…
2025-04-22
Medium
CVE-2025-27087
A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack.
2024-12-09
Medium
CVE-2023-29433
Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7.
2024-04-12
High
CVE-2024-30382
An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to…
Medium
CVE-2024-21610
An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon (cosd) of Juniper Networks Junos OS allows an authenticated, network-based attacker with low privileges to…
2023-01-13
High
CVE-2023-22391
A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS)…
2022-03-14
Medium
CVE-2022-0659
The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_ht…
2021-10-19
Medium
CVE-2021-31369
On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a par…
2021-04-22
Medium
CVE-2021-0239
In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit (AFT) manager process (Evo-aftmand), responsible for handling Ro…
2019-10-08
High
CVE-2019-17352
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. For example, a .jsp file may be stored and…
2019-04-17
High
CVE-2019-1654
A vulnerability in the development shell (devshell) authentication for Cisco Aironet Series Access Points (APs) running the Cisco AP-COS operating system could allow an authenticated, local attacker…
2018-08-15
Medium
CVE-2018-8753
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by leveraging a Bleichen…
2009-09-30
Low
CVE-2009-3486
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to…