… Earlier sandbox escape flaws impacting the same library include CVE-2023-30547 , CVE-2023-29017 , and CVE-2022-36067 , reflecting the challenge of securely isolating untrusted code in JavaScript sandbox environments. …
… Get the whitepaper Related Articles: Google Chrome adds session cookie theft protection for all users Google fixes one actively exploited Android zero-day, 124 flaws Google accidentally exposed details of unfixed Chromium flaw Google now offers up to $1.5 million for some Android exploits New Gogs … …
… Claim Your Spot Related Articles: Ivanti fixes EPMM zero-days chained in code execution attacks Palo Alto Networks warns of firewall RCE zero-day exploited in attacks CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday Ivanti warns of two EPMM flaws exploited in zero-day attacks Palo Alt… …
… Identified as CVE-2026-45185 , the security issue impacts some Exim versions before 4.99.3 that use the default GNU Transport Layer Security GnuTLS library for secure communication. It is a user-after-free UAF flaw triggered during the TLS shutdown while handling BDAT chunked SMTP traffic. …
… This will ensure that they will get a "The extension 'GitHub Repositories' wants to sign in using GitHub." warning when clicking on links attempting to exploit this flaw. Askar said they notified GitHub one hour before disclosing the bug and noted that they chose immediate public disclosure due to… …
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 By Sergiu Gatlan May 18, 2026 01:33 AM The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. …
… Get the whitepaper Related Articles: Max-severity flaw in ChromaDB for AI apps allows server hijacking 18-year-old NGINX vulnerability allows DoS, potential RCE New critical Exim mailer flaw allows remote code execution FFmpeg fixes PixelSmash flaw in widely used video decoder F5 issues out-of-band… …
… Cisco released security updates for numerous products, including a DoS flaw that requires manual rebooting of affected systems for recovery. Fortinet released security updates for two critical flaws in FortiSandbox and FortiAuthenticator . …
… This week, it also released the May 2026 Patch Tuesday security updates , covering 120 vulnerabilities, including 17 "critical" flaws. 99% of What Mythos Found Is Still Unpatched. AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. …
… After the zero-day flaws are disclosed during the Pwn2Own competition, vendors have 90 days to release security fixes for their software and hardware products. …
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.