Base de CVEs

CVE-2026-62146 Alta · 7.8 CWE-501 30/09/2026

Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.

CVE-2026-44091 Crítica · 9.1 CWE-501 30/07/2026

Creation of a new configuration by posting a malicious ID to MQTT

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.

CVE-2026-65902 Média · 6.1 CWE-501 23/07/2026

DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags

DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit cfg.ALLOWED_TAGS / cfg.ALLOWED_ATTR array. A hook that mutates these fields permanently widens the default allow-lists for the lifetime of the DOMPurify instance, so all subsequent default-config sanitize calls inherit the widened defaults and attacker payloads using the poisoned tag/attribute name survive sanitization. removeAllHooks(), clearConfig(), and passing a fresh cfg do not recover the state; only constructing a new DOMPurify instance does.

CVE-2026-33828 Alta · 7.8 CWE-501 09/06/2026

Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

CVE-2026-24153 Média · 5.5 CWE-501 31/03/2026

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application…

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2026-25725 Crítica · 10.0 CWE-501 06/02/2026

Anthropic Claude Code: proteção ausente do sandbox para .claude/settings.json (CVE-2026-25725)

O Claude Code é uma ferramenta de programação agêntica. Antes da versão 2.1.2, o mecanismo de sandboxing bubblewrap do Claude Code não protegia adequadamente o arquivo de configuração .claude/settings.json quando ele não existia na inicialização. Enquanto o diretório pai estava montado como gravável e o .claude/settings.local.json estava explicitamente protegido com restrições de somente leitura, o settings.json não era protegido se estivesse ausente. Isso permitia que código malicioso executado dentro do sandbox criasse esse arquivo e injetasse hooks persistentes (como comandos SessionStart) que seriam executados com privilégios do host quando o Claude Code fosse reiniciado. Este problema foi corrigido na versão 2.1.2.

CVE-2025-14542 Alta · 7.5 CWE-501 13/12/2025

Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpoint

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.