Vulnerability fixed in Oracle Java SE

Oracle has fixed vulnerabilities in the following Oracle Java products: Java SE JDK and JRE The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to system data. Only applications that execute untrusted code e.g., using third-party...

Google Chrome iframe sandbox improperly implemented vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

PT-2020-16990 · Hashicorp +1 · Nomad +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Nomad and Nomad Enterprise versions 0.9.0 through 0.12.7 Description: The client Docker file sandbox feature in HashiCorp Nomad and Nomad Enterprise may be subverted when not explicitly disabled or when using a volume mount type. Th...

CVE-2020-27195

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6...

DEBIAN-CVE-2020-6537

Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2020-13753

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONENEWUSER and the TIOCSTI ioctl. CLONENEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute comman...

[ASA-202007-1] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-202007-1 ========================================= Severity: Critical Date : 2020-07-14 CVE-ID : CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 CVE-2020-13753 Package : webkit2gtk Type : multiple issues Remote : Y...

Unspecified Vulnerability in Apple iOS, iPadOS, and macOS Catalina Sandbox Component

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.Sandbox Sandbox is one of the sandbox components. A security vulnerability in the Sandbox component...

Apple macOS Catalina Sandbox Component Unauthorized Access Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers, of which Sandbox is a sandbox component. A security vulnerability exists in the Sandbox component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit the vulnerability to access...

UBUNTU-CVE-2020-2773

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

Unspecified Vulnerability in Apple iOS and iPadOS Sandbox Components

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for the iPad tablet computer. sandbox is a sandbox component. A security vulnerability exists in the Sandbox component of Apple iOS before...

VulnCheck KEV: CVE-2018-17463

Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and...

PT-2019-1857 · Oracle · Java Se +1

Name of the Vulnerable Software and Affected Versions: Oracle Java SE version 8u202 Description: The issue is related to a vulnerability in the Java SE component, specifically the Windows DLL subcomponent. This vulnerability allows an unauthenticated attacker with network access via multiple...

Sensio Labs Twig Information Disclosure Vulnerability

Sensio Labs Twig is a PHP templating engine from Sensio Labs, France, which supports custom tags and filters and creates DSLs. A security vulnerability exists in the sandbox in Sensio Labs Twig versions prior to 1.38.0 and 2.x versions prior to 2.7.0. The vulnerability can be exploited by an...

DEBIAN-CVE-2019-5782

Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

DEBIAN-CVE-2019-5762

Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

Remote Code Execution (RCE)

sandbox is vulnerable to remote code execution. An attacker is able to escape the sandbox using function and constructor calls, enabling process calls to execute arbitrary commands on the system...

Google Chrome WebAudio Memory Misreference Vulnerability (CNVD-2019-03606)

Google Chrome is the United States Google Google company developed a Web browser. WebAudio is one of the audio player plug-ins. A memory misreference vulnerability exists in WebAudio in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to execute...

Google Chrome WebAssembly Code Execution Vulnerability

Google Chrome is a web browser developed by Google, and WebAssembly is a sandboxed execution environment. A code execution vulnerability exists in WebAssembly in versions of Google Chrome prior to 62.0.3202.62. A remote attacker can exploit this vulnerability to write arbitrary code out-of-bounds...