#cve-vulnerabilities

[ follow ]
#openclaw #ai-assistant-security #sandbox-escape #privilege-escalation #chrome-148 #browser-security
Information security
fromSecurityWeek
1 week ago

'Claw Chain' OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery

Chained OpenClaw vulnerabilities let attackers with sandbox code execution control the agent, bypass restrictions, steal secrets, escalate privileges, and persist on the host.
Information security
fromSecurityWeek
2 weeks ago

Chrome 148 Update Patches Critical Vulnerabilities

Chrome 148 fixes 79 vulnerabilities, including 14 critical issues, with multiple memory-safety bugs and paid bug bounties, while no exploitation in the wild is reported.
Information security
fromInfoQ
2 weeks ago

Copy Fail and Dirty Frag: Linux Page-Cache Exploits Target Every Major Distribution

Two Linux kernel local privilege escalation flaws enable unprivileged users to obtain root by manipulating page cache via AF_ALG and related logic bugs.
Information security
fromZero Day Initiative
2 months ago

Zero Day Initiative - The March 2026 Security Update Review

Adobe released eight bulletins in March 2026 addressing 80 CVEs across multiple products, with critical patches for Acrobat Reader, Substance 3D Stager, and Premiere Pro focusing on arbitrary code execution vulnerabilities.
fromSecurityWeek
8 months ago

SonicWall Updates SMA 100 Appliances to Remove Overstep Malware

As part of the attacks, flagged in July by Google's Threat Intelligence Group, a threat actor tracked as UNC6148 infected fully patched SMA appliances with a persistent backdoor and user-mode rootkit that supports credential, session token, and one-time password seed theft. The threat actor likely used local administrator credentials that were stolen in previous attacks, before devices were patched, through the exploitation of known vulnerabilities, such as CVE-2025-32819, CVE-2024-38475, CVE-2021-20035, CVE-2021-20038, and CVE-2021-20039.
Information security
[ Load more ]