Lucene search
+L

319 matches found

RedHat Linux
RedHat Linux
added 4 hours ago3 views

pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.2AI score0.00125EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 6 days ago5 views

pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/07/17 12:0 a.m.10 views

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/16 6:8 p.m.9 views

SUSE CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.2AI score0.00125EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/16 2:16 p.m.6 views

DEBIAN-CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.2AI score0.00125EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/16 2:16 p.m.10 views

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS0.00125EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/16 2:16 p.m.6 views

UBUNTU-CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.2AI score0.00125EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/16 1:26 p.m.10 views

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/16 1:26 p.m.43 views

CVE-2026-5674 Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS0.00125EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/16 1:26 p.m.12 views

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.3AI score0.00125EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/16 1:26 p.m.11 views

EUVD-2026-44925

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 1:26 p.m.15 views

CVE-2026-5674

CVE-2026-5674 describes a vulnerability in PipeWire where the PulseAudio compatibility layer can be abused to escape sandboxed environments (e.g., Flatpak). An attacker with minimal sandbox permissions can load a malicious library, enabling arbitrary code execution outside the sandbox and potenti...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/16 1:26 p.m.11 views

CVE-2026-5674 Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/16 1:26 p.m.14 views

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/16 12:0 a.m.16 views

PT-2026-60475

Name of the Vulnerable Software and Affected Versions PipeWire affected versions not specified Description A flaw in the PulseAudio compatibility layer of PipeWire, a multimedia server, allows an attacker to escape sandboxed applications, such as Flatpak. An attacker with minimal permissions with...

8.8CVSS6.1AI score0.00125EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-5674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting...

8.8CVSS6.4AI score0.00125EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/13 3:54 p.m.11 views

USN-8535-1 pipewire vulnerabilities

It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. CVE-2026-14324 It was discovered that PipeWire performed multiple unbounded stack...

6.5CVSS6.1AI score0.00175EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-14330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330 Note that Nessus relies on the presence of the package as reported by the...

5.5CVSS5.9AI score0.001EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/01 3:17 p.m.18 views

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

5.5CVSS0.001EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/01 3:17 p.m.7 views

DEBIAN-CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder