Lucene search
K

16779 matches found

Github Security Blog
Github Security Blog
added 2026/04/23 9:46 p.m.9 views

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

Overview A critical Remote Code Execution RCE vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. The issue has been fixed...

10CVSS6.4AI score0.0091EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2026/04/23 9:31 p.m.6 views

EUVD-2026-25301

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

7.1CVSS5.9AI score0.00218EPSS
Exploits1References4
CVE
CVE
added 2026/04/23 8:26 p.m.9 views

CVE-2026-6940

CVE-2026-6940 : radare2 versions before 6.1.4 contain a path traversal vulnerability in the project deletion feature. A local attacker can supply absolute paths that escape the dir.projects root to recursively delete arbitrary directories, by targeting project marker files outside the project sto...

7.1CVSS5.9AI score0.00218EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 8:26 p.m.2 views

CVE-2026-6940 radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

7.1CVSS5.4AI score0.00218EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/23 8:26 p.m.29 views

CVE-2026-6940 radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

7.1CVSS0.00218EPSS
Exploits1References3
EUVD
EUVD
added 2026/04/23 6:33 p.m.4 views

EUVD-2026-25252

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.8AI score0.00211EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/23 6:33 p.m.6 views

EUVD-2026-25253

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

8.3CVSS5.8AI score0.00187EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/23 6:33 p.m.5 views

EUVD-2026-25251

Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00285EPSS
Exploits0References3
NVD
NVD
added 2026/04/23 6:16 p.m.3 views

CVE-2026-6919

Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.00285EPSS
Exploits0References2
NVD
NVD
added 2026/04/23 6:16 p.m.6 views

CVE-2026-6920

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.00211EPSS
Exploits0References2
NVD
NVD
added 2026/04/23 6:16 p.m.6 views

CVE-2026-6921

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

8.3CVSS0.00187EPSS
Exploits0References2
OSV
OSV
added 2026/04/23 6:16 p.m.5 views

DEBIAN-CVE-2026-6921

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

8.3CVSS5.3AI score0.00187EPSS
Exploits0References1
CVE
CVE
added 2026/04/23 4:12 p.m.22 views

CVE-2026-6921

CVE-2026-6921 describes a race condition in the GPU component of Google Chrome on Windows, prior to version 147.0.7727.117, that could allow a remote attacker to potentially escape the browser sandbox via a crafted video file. The vulnerability is exposed via a network vector and requires user in...

8.3CVSS5.8AI score0.00187EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 4:12 p.m.2 views

CVE-2026-6921

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

5.8AI score0.00187EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 4:12 p.m.6 views

CVE-2026-6921

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

8.3CVSS5.8AI score0.00187EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/23 4:12 p.m.34 views

CVE-2026-6921

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

0.00187EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/23 4:12 p.m.34 views

CVE-2026-6920

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

0.00211EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 4:12 p.m.2 views

CVE-2026-6920

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.8AI score0.00211EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 4:12 p.m.4 views

CVE-2026-6920

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00211EPSS
Exploits0References2
CVE
CVE
added 2026/04/23 4:12 p.m.41 views

CVE-2026-6920

CVE-2026-6920 describes an out-of-bounds read in the GPU component of Google Chrome on Android, allowing a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected: Chrome on Android; vulnerable component: GPU/renderer interaction; r...

9.6CVSS5.8AI score0.00211EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder