46783 matches found
CVE-2026-113271
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-113279
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-113279
A memory corruption vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could exploit this by navigating to a crafted HTML page to potentially execute arbitrary code within the sandbox. This issue was reported by Xinyang Ge on 20...
CVE-2026-113279
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-113279
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
MAL-2026-18109 Malicious code in rs-lookout-sandbox-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...
Malicious code in rs-lookout-sandbox-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...
firejail
Linux namespaces and seccomp-bpf sandbox...
MGASA-2026-0522 Updated firefox, nss, firefox-l10n packages fix security vulnerabilities
Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...
MGASA-2026-0523 Updated thunderbird packages fix security vulnerabilities
Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...
Updated thunderbird packages fix security vulnerabilities
Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...
Updated firefox, nss, firefox-l10n packages fix security vulnerabilities
Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...
CVE-2026-86961
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...
CVE-2026-86949
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...
CVE-2026-109441
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...
CVE-2026-109440
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attacke...
CVE-2026-86961
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...
CVE-2026-86961
A race condition in Apple software allows a malicious application to potentially break out of its sandbox . The underlying cause is a lack of proper synchronization, which has been addressed with additional validation. This vulnerability affects iOS , iPadOS , and macOS (specifically macOS Golden...
