26218 matches found
CVE-2026-16418
This CVE concerns Google Chrome’s V8 engine. A stack buffer overflow in V8 prior to 150.0.7871.182 could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software: Google Chrome (V8 component). Underlying cause: stack buffer overflow i...
CVE-2026-16418
Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-16416
Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...
CVE-2026-16414
CVE-2026-16414 describes insufficient validation of untrusted input in Chromecast within Google Chrome, affecting the Chromium-based Chromecast component before version 150.0.7871.182. The underlying issue enables a local attacker to potentially perform a sandbox escape through malicious network ...
CVE-2026-16414
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...
CVE-2026-16413
CVE-2026-16413 describes an out-of-bounds write in ANGLE used by Google Chrome, allowing a remote attacker with a compromised renderer process to potentially escape the sandbox via a crafted HTML page. Affected: Chrome/ANGLE before 150.0.7871.182. Root cause: out-of-bounds write in ANGLE. Impact:...
CVE-2026-16413
Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-16421
Concrete details: CVE-2026-16421 affects Google Chrome WebAudio, with an inappropriate implementation allowing remote code execution inside a sandbox via a crafted HTML page, before version 150.0.7871.182. Impact is high and exploitation could occur remotely through a crafted page. Affected produ...
CVE-2026-16420
CVE-2026-16420 describes a Type Confusion in WebAudio in Google Chrome prior to version 150.0.7871.182 , allowing a remote attacker to execute arbitrary code in the sandbox via a crafted HTML page. Chromuim severity is reported as High. Affected component: WebAudio in Chrome. Connected records ci...
CVE-2026-16421
Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-16420
Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-47059
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...
CVE-2026-47392
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins modul...
CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins modul...
CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins modul...
CVE-2026-47392
CVE-2026-47392 describes a sandbox escape in PraisonAI/praisonaiagents where evaluating code via execute_code() in subprocess sandbox mode can be bypassed by accessing the real builtins module through print.self , then retrieving import via vars() and constructing a dynamic attribute access to im...
CVE-2026-8933
A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...
CVE-2026-15226
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or...
CVE-2026-8933 snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup
A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...
EUVD-2026-46262
A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...