EUVD-2026-49045

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to bypass the sandboxing protection mechanism

The vulnerability of Google Chrome’s DevTools component is related to deficiencies in isolating access control. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...