CVE-2022-25236
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVSS
9.8
Crítica
EPSS
35.3%
p98
KEV
—
Exploit Today
30
0-100
Publicado: 16 de fev. de 2022 · Última mod.: 14 de out. de 2026 · CWE-668
34.2%EPSS · 30 dias35.3%
2026-10-112026-11-08
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/561
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5085
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/561
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-76185——
———Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. In multi-team deployments a Dag author could read another team's Variable or Connection value by crafting a colliding secret id. Only deployments with both `core.multi_team = True` and `secrets.use_cache = True` are affected.
Users are advised to upgrade to apache-airflow 3.4.0 or later. Deployments that cannot upgrade can set `secrets.use_cache = False`.7hCVE-2026-102280—1.2%
——0Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primitive changes file attributes, timestamps, writeability, or 8.3 short names; a short-name redirection can additionally contribute to SYSTEM code execution when a privileged process resolves an attacker-controlled short-name path in a location SbieSvc can open. This vulnerability is fixed in 1.18.6.4dCVE-2026-121175—7.9%
——2Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-1211688.8 ALT31.1%
——9Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)5dCVE-2026-1203089.9 CRÍ44.9%
——13A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace owns. Parent-directory segments in the identifier collapse the joined path to the worker's filesystem root, and the worker bind-mounts that path into the sandbox read-write unless the volume was explicitly marked read-only. A tenant with a workspace token can therefore read and write the worker's files, including other tenants' volumes stored on that machine. Confirmed against gateway 0.1.769 and worker 0.1.745. Fixed in gateway 0.1.776 and worker 0.1.756: volume identifiers and mount paths are validated before a mount is built, including for stubs saved before the check existed, and the gateway rejects a volume that does not exist or is not owned by the workspace.7dCVE-2026-115522—32.0%
——10Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Kit (ADK) for Python (google-adk) versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0 allows a caller in one application to list, read, overwrite, or delete artifacts belonging to another application when both applications share a FileArtifactService root directory and use the same user_id (and session_id for session-scoped artifacts). FileArtifactService accepted app_name across its public API methods but omitted app_name when constructing on-disk paths (root/users/{user_id}/... instead of root/apps/{app_name}/users/{user_id}/...). Version 2.6.0 scoped writes by app_name but retained a legacy root/users/{user_id} fallback for reads and deletes; version 2.7.0 and the 1.x backport in version 1.39.1 removed the fallback and enforce full per-app path scoping.4d