CWE-680 (CWE-680) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-680, highest CVSS first.

HIGH 8.4CVE-2026-76825public PoC2026-09-16
RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPython could allow a sandbox escape when a custom import policy or globals exposed the standard library s…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-95107public PoC2026-10-20
A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that size and asked the object pool for the result **without checking the addition**. A size near the top of a `ULONG` …
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-91189public PoC2026-10-20
The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from the file and only the upper bound of `last_glyph` is validated, so a page declaring …
AI risk analysis on Exploit-DB.ai →