Lucene search
K

49 matches found

OSV
OSV
added 2026/06/04 11:16 p.m.5 views

DEBIAN-CVE-2026-10941

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00407EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.6 views

PT-2026-46474

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in the PDF component. This allows a remote attacker to execute arbitrary code within a sandbox if a user is convinced to perform specific UI gestures while...

9.6CVSS6.4AI score0.00444EPSS
Exploits0References437
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.8 views

PT-2026-44646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description An inappropriate implementation in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within a sandbox by using a specially craft...

9.6CVSS6.3AI score0.00383EPSS
Exploits0References156
Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.7 views

PT-2026-42245

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179 Description A use after free issue in the Document Object Model DOM allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after free i...

8.8CVSS6.2AI score0.00501EPSS
Exploits0References30
Cvelist
Cvelist
added 2026/05/14 7:52 p.m.31 views

CVE-2026-8581

Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

0.00262EPSS
Exploits0References2
CVE
CVE
added 2026/04/08 9:20 p.m.9 views

CVE-2026-5863

Summary: CVE-2026-5863 is an insecure implementation in the V8 engine of Google Chrome/Chromium prior to 147.0.7727.55 that could allow remote code execution via a crafted HTML page. The current public docs list the issue and indicate high impact, but do not provide exploitation details. Public u...

8.8CVSS6.3AI score0.00292EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2026/03/25 11:53 a.m.1 views

SUSE CVE-2026-4678

Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00397EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/25 12:32 a.m.1 views

EUVD-2026-15133

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox...

4.3CVSS5.8AI score0.00436EPSS
Exploits0References6
EUVD
EUVD
added 2026/03/24 12:30 a.m.6 views

EUVD-2026-14585

OpenClaw before 2026.3.2 contains a symlink traversal vulnerability in stageSandboxMedia that allows attackers to overwrite files outside the sandbox workspace. Attackers can exploit unvalidated destination paths in media/inbound writes to follow symlinks and overwrite host files beyond intended...

6.9CVSS5.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.2 views

PT-2026-27583

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description A flaw exists due ...

6.5CVSS5.8AI score0.0061EPSS
Exploits0References138
CNVD
CNVD
added 2026/03/02 12:0 a.m.1 views

Security Bypass Vulnerability in Multiple Apple Products (CNVD-2026-14491)

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple macOS is a specialized operating system developed for Mac computers. A security bypass vulnerability exists in multiple Apple products and is due to a logic issue in the...

8.8CVSS5.9AI score0.00132EPSS
Exploits0References1
CNVD
CNVD
added 2026/03/02 12:0 a.m.2 views

Security Bypass Vulnerability in Multiple Apple Products (CNVD-2026-14479)

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A security bypass vulnerability exists in multiple Apple products, which is caused by a permissions issue i...

7.1CVSS5.9AI score0.00116EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.6 views

MiracleLinux 8 : bubblewrap-0.4.0-2.el8_10, flatpak-1.12.9-3.el8_10 (AXSA:2024-8785:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8785:01 advisory. flatpak: Access to files outside sandbox for apps using persistent= --persist CVE-2024-42472 Tenable has extracted the preceding description block directly...

10CVSS5.6AI score0.01283EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.3 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Tahoe versions prior to 26.1, which stems from an insufficient sandbox restriction that could cause an application to break throug...

5.2CVSS6.2AI score0.00136EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-2212

Malware in sbrugna...

8.6CVSS8.1AI score0.04022EPSS
Exploits0References16
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9005

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.00295EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-36615

Malicious code in bioql PyPI...

6.3CVSS6.4AI score0.00233EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-29335

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00197EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-23098

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00548EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-9802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded...

7.5CVSS8.1AI score0.01127EPSS
Exploits0References2
Rows per page
Query Builder