Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.7 views

CVE-2025-66479

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References1
NVD
NVD
added 2025/12/04 9:16 p.m.6 views

CVE-2025-66479

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS0.00136EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/04 8:57 p.m.4 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS6.9AI score0.00136EPSS
Exploits0References2
OSV
OSV
added 2025/12/04 8:57 p.m.3 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/04 8:57 p.m.19 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS0.00136EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/12/04 4:55 p.m.6 views

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2025/04/30 8:15 p.m.27 views

CVE-2024-6030

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this...

7CVSS0.00142EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/30 12:0 a.m.4 views

PT-2025-18324 · Tesla · Tesla Model S

Name of the Vulnerable Software and Affected Versions: Tesla Model S affected versions not specified Description: This issue allows local attackers to escape the sandbox on affected Tesla Model S vehicles. To exploit this, an attacker must first obtain the ability to execute code within the sandb...

7CVSS6.8AI score0.00142EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.4 views

Tesla Model S 安全漏洞

Tesla Model S is an automobile from the American company Tesla Tesla. A security vulnerability exists in Tesla Model S. The vulnerability stems from a process allowing modification of the interface, which could lead to a network sandbox bypass...

7CVSS6.8AI score0.00142EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/08 2:32 p.m.18 views

CVE-2024-32980 Spin contains a potential network sandbox escape for specifically configured Spin applications

Spin is the developer tool for building and running serverless applications powered by WebAssembly. Prior to 2.4.3, some specifically configured Spin applications that use self requests without a specified URL authority can be induced to make requests to arbitrary hosts via the Host HTTP header...

9.1CVSS6.9AI score0.00485EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/08 2:32 p.m.22 views

CVE-2024-32980 Spin contains a potential network sandbox escape for specifically configured Spin applications

Spin is the developer tool for building and running serverless applications powered by WebAssembly. Prior to 2.4.3, some specifically configured Spin applications that use self requests without a specified URL authority can be induced to make requests to arbitrary hosts via the Host HTTP header...

9.1CVSS9.4AI score0.00485EPSS
Exploits0References2
Rows per page
Query Builder