https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:36:23 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-10037 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://vulnerability.circl.lu/vuln/bell-cve-2026-10037 https://vulnerability.circl.lu/vuln/fkie_cve-2026-10037 <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-10037 https://vulnerability.circl.lu/vuln/ghsa-xg8h-3f4m-39v6 <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> https://vulnerability.circl.lu/vuln/ghsa-xg8h-3f4m-39v6 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-10037 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openjdk-9, Ubuntu:20.04:LTS: openjdk-13, Ubuntu:20.04:LTS: openjdk-16, Ubuntu:22.04:LTS: mailcap, Ubuntu:22.04:LTS: openjdk-18, Ubuntu:24.04:LTS: mailcap, Ubuntu:25.10: mailcap, Ubuntu:26.04:LTS: mailcap</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openjdk-9, Ubuntu:20.04:LTS: openjdk-13, Ubuntu:20.04:LTS: openjdk-16, Ubuntu:22.04:LTS: mailcap, Ubuntu:22.04:LTS: openjdk-18, Ubuntu:24.04:LTS: mailcap, Ubuntu:25.10: mailcap, Ubuntu:26.04:LTS: mailcap</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-10037