2 matches found
JLSEC-2026-1348 Wasmtime doesn't fully sandbox all the Windows device filenames
Impact Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so...
10CVSS5.4AI score0.00836EPSS
SaveExploits0References7
RUSTSEC-2024-0438 Wasmtime doesn't fully sandbox all the Windows device filenames
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory...
10CVSS6.5AI score0.00836EPSS
SaveExploits0References3
20