Hot Topics

Sandbox Escape

SlashNext vm2 sandbox bucket travel

Sandbreak vm2 Flaw is a 10 But Exposes Vulnerability of Sandboxes

| | 0-day vulnerability, application, Sandbox Escape, vm2, zero-day
As vulnerabilities go, the Sandbreak vm2 flaw is as potentially as severe as it gets, snagging a 10.0 CVSS score. The bug, CVE-2022-36067, should be immediately patched if it’s used with applications, ...
Security Boulevard
SSD Advisory – iOS/macOS Safari Sandbox Escape via QuartzCore Heap Overflow

SSD Advisory – iOS/macOS Safari Sandbox Escape via QuartzCore Heap Overflow

| | Heap Overflow, Sandbox Escape, SecuriTeam Secure Disclosure
Vulnerabilities Summary QuartzCore ( https://developer.apple.com/documentation/quartzcore ), also known as CoreAnimation, is a framework use by macOS and iOS to build an animatable scene graph. CoreAnimation uses a unique rendering model where the ...
SecuriTeam Blogs
SSD Advisory – Chrome AppCache Subsystem SBX by utilizing a Use After Free

SSD Advisory – Chrome AppCache Subsystem SBX by utilizing a Use After Free

| | Sandbox Escape, SecuriTeam Secure Disclosure, Use After Free
Vulnerabilities Summary The vulnerability exists in the AppCache subsystem in Chrome Versions 69.0 and before. This code is located in the privileged browser process outside of the sandbox. The renderer interacts with ...
SecuriTeam Blogs