PT-2026-85240

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A type confusion issue exists in the Compositing component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted...

CVE-2026-85165: Improper Neutralization of Directives in Dynamically Evaluated Code

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...

CVE-2026-85169: Improper Control of Generation of Code

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

PT-2026-84997

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...

Linux Distros Unpatched Vulnerability : CVE-2026-84324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network...

PT-2026-85237

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue exists in the Compositing component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox ...

PT-2026-85235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A high-severity type confusion issue exists in the V8 JavaScript and WebAssembly engine. This flaw occurs when the V8 optimizer incorrectly validates the element type of an array during...

CVE-2026-85051: Access of Resource Using Incompatible Type

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

VulnCheck KEV: CVE-2026-85046

Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,...

Linux Distros Unpatched Vulnerability : CVE-2026-84334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandb...

CVE-2026-85047: Improper Input Validation

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-85046: Access of Resource Using Incompatible Type

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-85231

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a crafted HTML page. Use after free is a memory...

PT-2026-95384

Name of the Vulnerable Software and Affected Versions vm2 NodeVM versions prior to 3.12.1 Description A sandbox escape exists because the DANGEROUS BUILTINS denylist fails to include child process, even though other modules capable of spawning host processes are blocked. This allows attackers to...

PT-2026-95385

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.12.1 Description A sandbox escape exists in VM and NodeVM when an embedder exposes a host API that returns a host-realm Promise. The bridge's rejection sanitizer, specifically the functions hostPromiseSanitizeReject,...

PT-2026-95382

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.12.1 Description An issue exists in the apply trap of the bridge lib/bridge.js where a nullish this receiver is not correctly handled. When sandboxed code invokes a host-provided non-strict sloppy-mode function without ...

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Summary The Twig content sandbox replaces config with the redacted SandboxConfig facade and strips Config::get/toArray from the method allowlist GHSA-j274-39qw-32c9, so editor content can't read config secrets via config. That's bypassable: grav is the raw container, offsetget is allow-listed on...

EUVD-2026-62535

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter CVE-2026-44738 bypass...

GHSA-MC5Q-6HPJ-RP7J Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Summary The Twig content sandbox replaces config with the redacted SandboxConfig facade and strips Config::get/toArray from the method allowlist GHSA-j274-39qw-32c9, so editor content can't read config secrets via config. That's bypassable: grav is the raw container, offsetget is allow-listed on...

[SECURITY] [DSA 6481-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6481-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 02, 2026 https://www.debian.org/security/faq -...