Advisories · Technology
patriksimek vm2.
Every CVE that names patriksimek vm2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
- patriksimek vm2
- CWE-693
- CVSS 6.9 Medium
vm2 3.11.8 Sandbox Escape via crypto.setFips
- patriksimek vm2
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
- patriksimek vm2
- Code injection