https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:40:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14942 bdu:2026-14942 https://cve.radiocsirt.org/vuln/bdu:2026-14942 https://cve.radiocsirt.org/vuln/euvd-2026-370754 EUVD-2026-370754 https://cve.radiocsirt.org/vuln/euvd-2026-370754 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92947 <p>vm2 before 3.11.7 exposes Node&#39;s shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed code can read and write to host-realm buffers by acquiring ArrayBuffers from small allocations, leading to sensitive data exposure and potential denial-of-service.</p> <p>vm2 before 3.11.7 exposes Node&#39;s shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed code can read and write to host-realm buffers by acquiring ArrayBuffers from small allocations, leading to sensitive data exposure and potential denial-of-service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-92947 https://cve.radiocsirt.org/vuln/ghsa-x5qg-8pq6-39h6 <p>vm2 before 3.11.7 exposes Node&#39;s shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed code can read and write to host-realm buffers by acquiring ArrayBuffers from small allocations, leading to sensitive data exposure and potential denial-of-service.</p> <p>vm2 before 3.11.7 exposes Node&#39;s shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed code can read and write to host-realm buffers by acquiring ArrayBuffers from small allocations, leading to sensitive data exposure and potential denial-of-service.</p> https://cve.radiocsirt.org/vuln/ghsa-x5qg-8pq6-39h6 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2997 <p>Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2997