https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:38:29 +0000 https://vulnerability.circl.lu/vuln/cve-2026-10037 <p><strong>Affected:</strong> Canonical Ubuntu</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> <p><strong>Affected:</strong> Canonical Ubuntu</p> <p>A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.</p> https://vulnerability.circl.lu/vuln/cve-2026-10037 https://vulnerability.circl.lu/vuln/usn-8518-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: mailcap, Ubuntu:24.04:LTS: mailcap, Ubuntu:25.10: mailcap, Ubuntu:26.04:LTS: mailcap</p> <p>Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of certain file types. An attacker could use this issue to escape a sandboxed application and execute arbitrary code on the host operating system.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: mailcap, Ubuntu:24.04:LTS: mailcap, Ubuntu:25.10: mailcap, Ubuntu:26.04:LTS: mailcap</p> <p>Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of certain file types. An attacker could use this issue to escape a sandboxed application and execute arbitrary code on the host operating system.</p> https://vulnerability.circl.lu/vuln/usn-8518-1