CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

PT-2026-136944

@the rz1027 The Dawn overflow is CVE-2025-0121156, and the sandbox bypass matters more in headless contexts where the usual site isolation boundaries are already relaxed. Manual Chromium updates make sense when the bundled version lags behind critical fixes...

CVE-2026-113730

A flaw was found in OGNL Object Graph Navigation Library. Under configurations that rely on stricter-invocation mode as a security boundary, the validation mechanism inspects the declaring class of invoked methods but fails to restrict Java reflection objects. A remote attacker capable of...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser versions prior to 5.39.412.57 are vulnerable to an iframe sandbox bypass occurring within a dual-tab environment . The root cause is associated with an Origin Validation Error (CWE-346). No specific exploit details or remediation instructions are provided in the documents.

Security update for ghostscript

This update for ghostscript fixes the following issues: CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917. Patch Instructions: To install th...

SUSE-SU-2026:5039-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. - CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917...

Google Chrome Microsoft Edge Bypass Sandbox

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Sandbox Bypass

The vulnerability in the Sandbox component of Google Chrome and Microsoft Edge is related to insecure privilege management. Exploitation of this vulnerability may allow a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability in media files of Google Chrome and Microsoft Edge is related to external control over a supposedly immutable web parameter. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

WebAppInstalls Sandbox Bypass

The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge is related to a data protection mechanism flaw. Exploitation of this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to bypass sandbox protections by using a specially crafted AppleScript command...

Google Chrome USB Bypass Sandbox

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to improper memory usage after deallocation. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome GPU Sandbox Bypass

The vulnerability in Google Chrome’s GPU component is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Safe Browsing Sandbox Bypass

The vulnerability in the Safe Browsing component of Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome USB Bypass Sandbox

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to improper memory usage after deallocation. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability in the Touchbar component of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...

Google Chrome Safe Browsing Bypass

The vulnerability in Google Chrome’s Safe Browsing component is related to synchronization errors when using a shared resource. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a malicious file...

Google Chrome Microsoft Edge Bypass Sandbox

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a specially crafted HTML page...