CVE-2026-73217 Cursor: Sandbox escape via tampered Python virtual environments

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

CVE-2026-68295

A flaw was found in the Linux kernel. The LoongArch Just-In-Time JIT compiler for the Berkeley Packet Filter BPF subsystem incorrectly sign-extends the results of signed 32-bit division and modulo operations. This behavior causes the upper bits of BPF registers to be set, which differs from the...

CVE-2026-54981

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-35502

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

EUVD-2026-56605

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

...

CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

...

CVE-2026-54981

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-54981

The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....

CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

...

CVE-2026-35502

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

EUVD-2026-56532

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-35502

CVE-2026-35502 describes a deserialization vulnerability in Intel(R) Extension for PyTorch prior to 2.8.0, affecting Ring 3: User Applications. An unprivileged, unauthenticated user could achieve local privilege escalation with low impact to confidentiality, integrity, and availability. The issue...

CVE-2026-35502

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-35502

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

EUVD-2026-56478

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20728

Intel Extension for TensorFlow software kidded with Protection mechanism failure before version 2.15.0.3, located in Ring 3: User Applications. This vulnerability could allow a local-privileged attacker with high privileges and low complexity, in combination with passive user interaction, to esca...