HomeAI · summaries
Storia in 3 fonti
JavaScript Sandbox Escape via Type Confusion in isolated-vm
1. Basic Information Article Name: GHSA-864f-rcv7-6rh4: Critical Type Confusion...
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are in 6.2.0 and 7.0.1.
- ·
securityweek.com
Critical Isolated-vm Vulnerability Leads to RCE on Host
A critical type confusion vulnerability in the isolated-vm library can lead to V8 sandbox escape and remote code execution on the host.
