EUVD-2026-49045

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

Google Chrome DevTools Sandbox Bypass

The vulnerability of Google Chrome’s DevTools component is related to deficiencies in isolating access control. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...