DeutschShown in its original language — a full translation is planned for a future version.
vm2: Mehrere Schwachstellen
view advisory published 2026-08-16
Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um Daten zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-92961US | high7.5 | — | ||
vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arbitrary host memory. Attackers… | ||||
| CVE-2026-47698US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dange… | ||||
| CVE-2026-47686US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateE… | ||||
| CVE-2026-47683US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concat(list, totalLength) or Buffer.fr… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:76788 vom 2026-10-06external
- Red Hat Security Advisory RHSA-2026:79088 vom 2026-10-08external
- GitHub Security Advisory GHSA-cfcw-xp6x-25gj vom 2026-08-16external
- GitHub Security Advisory GHSA-gmc2-2x9w-cgh9 vom 2026-08-16external
- GitHub Security Advisory GHSA-m283-3h24-438v vom 2026-08-16external
- GitHub Security Advisory GHSA-m5w8-4gq2-6f8x vom 2026-08-16external
- GitHub Security Advisory GHSA-v836-6xw4-9cx3 vom 2026-08-16external
- WID-SEC-W-2026-2865 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan