Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Projectatomic

First CVE: Mar 29, 2017Active for: 9 yearsTotal CVEs: 4

Project Atomic maintains container and system-level tools including Bubblewrap and OCI-register-machine, which operate at the intersection of container isolation and privileged system access. The observed weakness classes—improper input validation, sensitive information exposure, improper privilege management, and incorrect use of privileged APIs—reflect the security-critical nature of sandboxing and system-integration components where parsing and access control are fundamental to containment boundaries. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 79% of tracked vendors
0.7
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 10% of tracked vendors
7.2
Avg CVSS Score
Higher Avg CVSS Score than 54% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Projectatomic over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 29, 2017
9 years ago
Most Recent CVE
Mar 31, 2020
2,306 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2017-5226CRITICAL
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input bu
Mar 29, 201710.033NONO
CVE-2020-5291HIGH
Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the
Mar 31, 20207.825NONO
CVE-2019-12439HIGH
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may
May 29, 20197.824NONO
CVE-2016-6349LOW
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
Mar 29, 20173.312NONO
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
25%
50%
25%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowHighCritical
Attack Vector
Local3 (75.0%)
Network1 (25.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (75.0%)
High0 (0.0%)
None1 (25.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Projectatomic.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Projectatomic — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Projectatomic's Products

View all 2 CNAs →

Top CWEs