chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2026-92129

A flaw was found in Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can bypass the sandbox protection. This is due to the plugin not checking calls from sandboxed scripts to methods added dynamically to a class at runtime...

CVE-2026-92122

A flaw was found in Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can bypass the sandbox protection. This is achieved by coercing a value to an interface within a sandboxed script, specifically when the value inherits a method...

CVE-2026-92126

A flaw was found in Jenkins Script Security Plugin. This vulnerability allows attackers with permission to define and run sandboxed scripts, such as Pipelines, to bypass the sandbox protection. The plugin fails to reject @Builder annotations that specify an arbitrary class in their builderStrateg...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

PT-2026-136944

@the rz1027 The Dawn overflow is CVE-2025-0121156, and the sandbox bypass matters more in headless contexts where the usual site isolation boundaries are already relaxed. Manual Chromium updates make sense when the bundled version lags behind critical fixes...

CVE-2026-113730

A flaw was found in OGNL Object Graph Navigation Library. Under configurations that rely on stricter-invocation mode as a security boundary, the validation mechanism inspects the declaring class of invoked methods but fails to restrict Java reflection objects. A remote attacker capable of...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser versions prior to 5.39.412.57 are vulnerable to an iframe sandbox bypass occurring within a dual-tab environment . The root cause is associated with an Origin Validation Error (CWE-346). No specific exploit details or remediation instructions are provided in the documents.

Security update for ghostscript

This update for ghostscript fixes the following issues: CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917. Patch Instructions: To install th...

SUSE-SU-2026:5039-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. - CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917...

Google Chrome Microsoft Edge Bypass Sandbox

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability in media files of Google Chrome and Microsoft Edge is related to external control over a supposedly immutable web parameter. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

WebAppInstalls Sandbox Bypass

The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge is related to a data protection mechanism flaw. Exploitation of this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...