CVE-2021-32847

CVE-2021-32847 describes a host memory disclosure vulnerability in HyperKit versions 0.20210107 and prior, affecting the mobyproject hyperkit. A malicious guest operating system can exploit a flaw in the disk driver to leak host memory into the virtualized guest. This is a medium severity vulnerability (CVSS 6.5) requiring local access to the guest (AV:L, PR:L) with low attack complexity (AC:L), leading to high confidentiality impact (C:H). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.