CWE-501: Trust Boundary Violation
The product mixes trusted and untrusted data in the same data structure or structured message.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- red hat openshift container platform 4.16, openshift container platform 5 +1 more Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket 7.8 High
- eclipse foundation threadx Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC)... 8.4 High
- kimdre doco-cd Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration 6.5 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 more Creation of a new configuration by posting a malicious ID to MQTT 8.8 High
- vllm, red hat exploit intelligence, openshift lightspeed +12 more +14 more vLLM: OpenAI auth bypass 9.1 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability 7.8 High
- gitoxide, gitoxide gix, gix-submodule +2 more gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule 7.3 High
- traefik, red hat openshift dev spaces 3.28 +1 more Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth 7.8 High
-
openclawnpm OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel 8.5 High -
openclawnpm OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade 7.3 High - electron, red hat build of podman desktop, build of podman desktop - tech preview +2 more Electron: Context Isolation bypass via contextBridge VideoFrame transfer 8.4 High
- nvidia jetson linux, jetson xavier series, jetson orin series and jetson thor +1 more NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not... 5.2 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 more vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out 8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 more Sandbox escape due to incorrect boundary conditions in the Telemetry component 8.6 High
- anthropic claude code, anthropics claude-code +1 more Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json 7.7 High
- mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the Graphics component 5.3 Medium
-
utcpPyPI Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpoint 7.5 High - openwebui open webui, open-webui +1 more Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events 7.3 High
- oracle configurator, e-business suite +1 more Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime... 7.5 High
- microsoft python, python extension for visual studio code +1 more Visual Studio Code Python Extension Remote Code Execution Vulnerability 7.8 High
- cli go-gh Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server 2.6 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 more Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium
- red hat advanced cluster management for kubernetes 2 Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens 7.5 High
- microsoft python, python extension for visual studio code +1 more Visual Studio Code Python Extension Remote Code Execution Vulnerability 8.8 High
- ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 more DHCP routing options can manipulate interface-based VPN traffic 7.6 High
- cisco aironet access point software, business wireless access point software, aironet access point software (ios xe controller) +1 more +3 more A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an... 5.9 Medium
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 more Kubevirt-csi: persistentvolume allows access to hcp's root node 6.5 Medium
- collaboraoffice richdocumentscode, collaboraonline online +1 more Improper handling of browser-side provided input in richdocuments path handling 7.2 High
- docker desktop Docker Desktop 4.11.x allows --no-windows-containers flag bypass 6.7 Medium
- zoom, zoom rooms, virtual desktop infrastructure +3 more +5 more Improper trust boundary implementation for SMB in Zoom Clients 8.3 High
- docker desktop Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers 7.1 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 more A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are... 6.4 Medium
- google llc play services sdk, google play services software development kit +1 more Incorrect signature verification on Google play-services-basement in Google Play SDK 5.7 Medium
- ls1intum artemis java test sandbox Artemis Java Test Sandbox Class Loading Escape 8.2 High
- electron Context isolation bypass via contextBridge in Electron 7.7 High
- electron Context isolation bypass via leaked cross-context objects in Electron 7.8 High
- electron Context isolation bypass via Promise in Electron 6.8 Medium
- cure53 dompurify DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags 5.3 Medium
- cure53 dompurify DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM 6.1 Medium
- cure53 dompurify DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks 6.1 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes 6.8 Medium