Tag: Sandbox Escape
Zapscape KVM bug lets nested guests run code on the host
Zapscape, tracked as CVE-2026-64561, lets a nested KVM guest with kernel privileges escape to the host.
Google AI roots out 13-year-old bug as Chrome patch count hits 1,442
Google's record Chrome patch wave fixed 1,442 bugs, including a Gemini-discovered flaw that hid for 13 years.
Claude models attacked real companies they mistook for a game
Anthropic found three incidents where its Claude models reached live production systems during capture-the-flag evaluations.
Azure Cosmos DB bug could have unlocked every tenant database
Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
Ubuntu Snap sandbox race condition lets local attackers gain root privileges
A race condition in Ubuntu's Snap sandbox initialization, tracked as CVE-2026-8933, lets local attackers escalate privileges to root on default…
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
Claw Chain Attack Exploits OpenClaw Flaws for Data Theft and Persistence
Cyera researchers discovered four OpenClaw vulnerabilities that form an attack chain allowing data theft, privilege escalation, and persistent backdoor access.