cve-2024-0044

CVE-2024-0044 CVE-2024-0044 allows a "run-as" attack to be performed, resulting in a local escalation of privileges. This enables an attacker to access private files stored locally by any application on the mobile device, compromising the security guarantees provided by the "Application Sandbox"...

CVE-2026-113034

A flaw was found in the FileSystem component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the application sandbox...

CVE-2026-113163

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the Web Graphics Library WebGL component allows a remote attacker to execute arbitrary code within the application sandbox. By tricking a user into visiting a maliciously crafted web page, an attacker can exploit...

CVE-2026-113155

A flaw was found in the Glic component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the application sandbox by convincing a user to visit a specially crafted HTML page. The issue is caused by a use-after-free memory corruption condition during...

CVE-2026-106414

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504223609...

CVE-2026-21053

CVE-2026-21053 describes an inability to properly validate input in Samsung Email before 6.2.13.1, allowing local attackers to create arbitrary files inside the app sandbox. Affected product/version: Samsung Email prior to 6.2.13.1. Root cause: improper input validation in the application. Impact...

CVE-2026-21053

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...

CVE-2026-21053: Undefined Security Weakness

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...

PT-2026-57094

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...

EUVD-2008-3617

Malware in sbrugna...

EUVD-2011-1163

Malware in sbrugna...

EUVD-2015-2522

Malware in sbrugna...

PT-2025-31232 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A race condition existed that was addressed with additional validation. This issue could allow an application to break out of its sandbox...

CVE-2025-31189

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox...

CVE-2020-9847

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox...

CVE-2024-42472

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and...

CVE-2023-27967

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

Apple macOS Monterey security vulnerabilities

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey suffers from a security vulnerability that stems from an application that may be able to break out of its sandbox...

Path traversal

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root...

CVE-2022-43451

CVE-2022-43451 affects OpenHarmony v3.1.2 and earlier, with a Multiple path traversal in the appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape the application sandbox; if chained with other vulnerabilities, an unprivileged process could gain full root pri...