vendors:Vercel × latest_source_host:thehackernews.com × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · há 7h high

Node.js patches Brotli decoder out-of-bounds write (RCE per vendor) and 9 other flaws; blocks eight compromised eMudhra CA keys

Node.js released security updates on October 21 for the 22.x, 24.x and 26.x lines (fixed in 22.23.4, 24.22.1 and 26.12.1), addressing 10 flaws. The most serious is an out-of-bounds write in the bundled Brotli decoder, which the project says could allow remote code execution. It is rated high, not critical. A public proof-of-concept publis…

CVE-2026-106069 CVE-2026-105483 CVE-2026-105482

thehackernews.com · há 2d · 2 fontes · 2 atualizações high

PwnEscape (CVE-2026-99999): Linux kernel networking flaw lets guest VMs leak host memory, demonstrated on Vercel sandboxes

A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…

CVE-2026-99999 cloud computing