A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run root-privileged commands on the host. Discovered during Vercel’s $1 million Sandbox challenge, the flaw affects host networking rather than KVM itself, demonstrating how infrastructure outside a hypervisor can undermine virtualization... Weiterlesen: Critical Linux Kernel Zero-Day Lets Attackers Escape Virtual Machines…
Intelligence View
⚡ tsecurity.de Intelligence
Critical Linux Kernel Zero-Day Lets Attackers Escape Virtual Machines and Gain Root Access
A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run root-privileged commands on the host.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
15 sources
CVE-2026-97559 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client DACL replace_sids_and_copy_aces/set_chmod_dacl integer overflow (WID-SEC-2026-3579)
14 more sources
VVulDB Updates4 hours agoCVE-2026-97561 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client privileges management (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97560 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client smb2_parse_native_symlink out-of-bounds (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97563 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client CIFSSMBRead DataOffset/DataLength out-of-bounds (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97562 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client tcon_super_cb use after free (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97564 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cifs.idmap privileges management (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97565 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client CIFSSMBRead out-of-bounds (WID-SEC-2026-3579)
+8
11 sources
CVE-2025-48311 | OffClicks Invisible Optin Plugin up to 1.0 on WordPress cross-site request forgery
10 more sources
VVulDB Updates3 hours agoCVE-2025-48321 | Ultimate Twitter Profile Widget Plugin up to 1.0 on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48318 | 多说社会化评论框 Plugin up to 1.2 on WordPress Setting cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48309 | web-able BetPress Plugin up to 1.0.1 Lite on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48310 | wptableeditor Table Editor Plugin up to 1.6.4 on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48319 | Mesa Reservation Widget Plugin up to 1.0.0 on WordPress cross site scripting VVulDB Updates3 hours agoCVE-2025-48314 | salubrio Add Code To Head Plugin up to 1.17 on WordPress cross site scripting
+4
5 sources
3 Apple HomeView alternatives you can get today – and two are cheaper
4 more sources
ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper CCNET11 months agoApple’s Watch Ultra 3 Is Now $299 Cheaper on Amazon, but Stock Is Limited ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4275678/vulnerabilities-cve/critical-linux-kernel-zero-day-lets-attackers-escape-virtual-machines-and-gain-root-access/