CVE-2013-0431
Oracle JRE Sandbox Bypass Vulnerability
CVSS
3.7
Bajo
EPSS
90.1%
p100
KEV
SÍ
25 may 2022
Exploit Today
80
0-100
Publicado: 31 ene 2013 · Última mod.: 2 oct 2026 · CWE-693
90.0%EPSS · 30 días90.3%
2026-09-162026-10-14
Producto
Oracle / Java Runtime Environment (JRE)
Vulnerabilidad
Oracle JRE Sandbox Bypass Vulnerability
Añadido a KEV
25 may 2022
Remediar antes de
15 jun 2022
Uso conocido en ransomware
Sí
Descripción resumida
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2013-0431
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
- arstechnica.comhttp://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
- blogs.computerworld.comhttp://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
- marc.infohttp://marc.info/?l=bugtraq&m=136439120408139&w=2
- marc.infohttp://marc.info/?l=bugtraq&m=136733161405818&w=2
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2013-0237.html
- rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2013-0247.html
- seclists.orghttp://seclists.org/fulldisclosure/2013/Jan/142
- seclists.orghttp://seclists.org/fulldisclosure/2013/Jan/195
- security.gentoo.orghttp://security.gentoo.org/glsa/glsa-201406-32.xml
- www.informationweek.comhttp://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717
- www.kb.cert.orghttp://www.kb.cert.org/vuls/id/858729
- www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2013:095
- www.oracle.comhttp://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- www.securityfocus.comhttp://www.securityfocus.com/archive/1/525387/30/0/threaded
- www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA13-032A.html
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16579
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19418
- wiki.mageia.orghttps://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
- arstechnica.comhttp://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1108664.7 MED—
——0Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before the required release age elapses.14hCVE-2026-1106895.3 MED—
——0A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.1.7 will fix this issue. The patch is named 9f6a6fbb9f1137345566d0ab44c73893dfe112fa. The affected component should be upgraded.16hCVE-2026-668746.5 MED—
——0For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution. A fork pull request author can supply a workflow matching a required status context but deliberately prevent it from running. Because skipped statuses count as success, branch protection or organization-required workflow checks can appear satisfied without the mandated workflow executing; no runner or maintainer approval is required for this path.21hCVE-2026-9460310.0 CRÍ59.4%
——18Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.2dCVE-2026-888385.5 MED1.3%
——0A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are re-parsed, clearing options can override nosuid, nodev, and noexec protections the administrator intended to enforce.20hCVE-2026-553768.8 ALT28.2%
——8Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/python_tool_executor.py because allowed standard-library modules expose operating-system, process, and filesystem capabilities through public attributes that pass _safe_import() and _validate_code_safety(). The runner then executes the supplied tool with exec(), permitting commands and file operations as the backend application user; self-registration affects reachability, but portal triggering alone does not grant code control. This issue is fixed in 0.0.40.2d