CWE-453

CWE-453 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-453, highest CVSS first.

  1. HIGH 8.6CVE-2026-92950public PoC2026-09-17

    vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itsel…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-1035772026-10-13

    Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-109828public PoC2026-10-13

    A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the a…

    AI risk analysis on Exploit-DB.ai →