CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...

CVE-2026-79112

A flaw was found in Skia, a 2D graphics library, within Google Chrome. This out-of-bounds read vulnerability could be exploited by a remote attacker who has already compromised the browser's renderer process. By presenting a specially crafted HTML page, the attacker could read sensitive memory...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

CAPEv2

CAPE: Estrazione di Configurazione e Payload dei Malware - Documentazione CAPE è una sandbox per malware. Una sandbox viene utilizzata per eseguire file malevoli in un ambiente isolato, monitorando il loro comportamento dinamico e raccogliendo reperti forensi. CAPE deriva da Cuckoo v1, che offre ...

wasm2c-tableflip

wasm2c sandbox escape: il modulo guest esegue un comando shell sull'host Leggi il blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc imposta table-size dal numero di elementi dichiarati dal modulo e poi ignora il risultato di calloc. Quando l'allocazione fallisc...

CVE-2026-79240

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment...

When an AI Agent Turned Attacker: What Qualys Sees Across Every Phase of the Hugging Face Kubernetes Intrusion

A phase-by-phase detection mapping of the first publicly documented autonomous agent intrusion against production infrastructure — including the phases where no product in our category sees anything at all. Executive Summary On July 9, 2026, an autonomous AI agent running inside an OpenAI...

CVE-2026-79069

A flaw was found in Google Chrome's Tint component on macOS. A remote attacker could exploit a memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-79054

A flaw was found in Chromecast within Google Chrome. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page,...

CVE-2026-79052

A flaw was found in Aura, a component within Google Chrome. This vulnerability, known as a 'use-after-free,' occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79008

A flaw was found in the Chromium GPU component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can occur when a user is enticed to open a specially crafted...

CVE-2026-79027

A flaw was found in WebRTC. A remote attacker could exploit a use-after-free vulnerability by sending crafted network traffic. This could allow the attacker to execute arbitrary code within the sandbox environment, leading to potential system compromise...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78985

A flaw was found in the FileSystem component of Google Chrome. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation would require social engineering to trick a user into...

CVE-2026-78948

A flaw was found in chromium-browser. This buffer overflow vulnerability in WebGL allows a remote attacker to execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

CVE-2026-78938

A flaw was found in the V8 JavaScript engine used in Chromium-based browsers. This type confusion vulnerability allows a remote attacker to execute unauthorized code within the browser's security sandbox by tricking a user into visiting a specially crafted web page. This could lead to a compromis...

CVE-2026-78945

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component could allow a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to potenti...

CVE-2026-78906

A flaw was found in Chromium's ANGLE component. A race condition, triggered by a specially crafted HTML page, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This could lead to a complete compromise of the affected system...