31918 matches found
CVE-2026-84119 Sandbox escape due to use-after-free in the DOM: Navigation component
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84119
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84119
CVE-2026-84119 is a sandbox escape in Mozilla Firefox caused by a use-after-free bug in the DOM: Navigation component. An attacker can exploit this via a network vector with low complexity and user interaction to gain full confidentiality, integrity, and availability impact (scope changed), yield...
EUVD-2026-69064
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84119
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-82072
An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
vm2 v3.11.8
vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...
Sandboxie v1.18.3
Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...
PT-2026-84356
Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI affected versions not specified OpenAI Codex Desktop affected versions not specified Description OpenAI Codex CLI and Codex Desktop automatically collect Git repository metadata without disabling the core.fsmonitor setting. If...
PT-2026-84561
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A buffer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved by...
Mozilla Thunderbird < 140.15
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-87 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...
PT-2026-84545
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the Proxy component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...
PT-2026-84562
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in WebGL, which occurs when a program continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary cod...
PT-2026-84557
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in WebRTC, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use aft...
PT-2026-84560
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the TabStrip component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...
PT-2026-84563
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in Shared Tab Groups. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by inducing a user to visi...
PT-2026-84174
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...
PT-2026-84354
Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS affected versions not specified Description OpenAI Codex Desktop can execute attacker-controlled Git hooks due to automated Git operations trusting the repository local core.hooksPath setting. If a us...
Mozilla Firefox < 155.0
The version of Firefox installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-82 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155,...
Mozilla Firefox ESR < 140.15
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-84 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and...