<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 27 May 2026 20:38:00 +0000</lastBuildDate>
    <item>
      <title>2ab6bf5f-def2-4a34-9160-f58133e26536</title>
      <link>https://vulnerability.circl.lu/sighting/2ab6bf5f-def2-4a34-9160-f58133e26536/export</link>
      <description>{"uuid": "2ab6bf5f-def2-4a34-9160-f58133e26536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mmess3fpzk2n", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:13:08.391831Z"}</description>
      <content:encoded>{"uuid": "2ab6bf5f-def2-4a34-9160-f58133e26536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mmess3fpzk2n", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:13:08.391831Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2ab6bf5f-def2-4a34-9160-f58133e26536/export</guid>
      <pubDate>Thu, 21 May 2026 16:13:08 +0000</pubDate>
    </item>
    <item>
      <title>dc95afbc-f330-4611-808a-ae960322130f</title>
      <link>https://vulnerability.circl.lu/sighting/dc95afbc-f330-4611-808a-ae960322130f/export</link>
      <description>{"uuid": "dc95afbc-f330-4611-808a-ae960322130f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40369", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116613469801218767", "content": "CVE-2026-40369 is a critical 12-byte kernel write vulnerability in nt!ExpGetProcessInformation that enables attackers to escape browser sandboxes and escalate privileges to NT AUTHORITY\\SYSTEM. By exploiting an unchecked pointer in NtQuerySystemInformation, researchers can bypass security features to forge a system token and execute arbitrary code.https://voidsec.com/cve-2026-40369-browser-sandbox-escape/", "creation_timestamp": "2026-05-21T16:18:58.030944Z"}</description>
      <content:encoded>{"uuid": "dc95afbc-f330-4611-808a-ae960322130f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40369", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116613469801218767", "content": "CVE-2026-40369 is a critical 12-byte kernel write vulnerability in nt!ExpGetProcessInformation that enables attackers to escape browser sandboxes and escalate privileges to NT AUTHORITY\\SYSTEM. By exploiting an unchecked pointer in NtQuerySystemInformation, researchers can bypass security features to forge a system token and execute arbitrary code.https://voidsec.com/cve-2026-40369-browser-sandbox-escape/", "creation_timestamp": "2026-05-21T16:18:58.030944Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dc95afbc-f330-4611-808a-ae960322130f/export</guid>
      <pubDate>Thu, 21 May 2026 16:18:58 +0000</pubDate>
    </item>
    <item>
      <title>abccec41-8d1b-4261-9d60-7579a9e40883</title>
      <link>https://vulnerability.circl.lu/sighting/abccec41-8d1b-4261-9d60-7579a9e40883/export</link>
      <description>{"uuid": "abccec41-8d1b-4261-9d60-7579a9e40883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mmev43s3p62w", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:54:31.952165Z"}</description>
      <content:encoded>{"uuid": "abccec41-8d1b-4261-9d60-7579a9e40883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mmev43s3p62w", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:54:31.952165Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/abccec41-8d1b-4261-9d60-7579a9e40883/export</guid>
      <pubDate>Thu, 21 May 2026 16:54:31 +0000</pubDate>
    </item>
    <item>
      <title>60766a28-0e57-48eb-a725-c38680db61d3</title>
      <link>https://vulnerability.circl.lu/sighting/60766a28-0e57-48eb-a725-c38680db61d3/export</link>
      <description>{"uuid": "60766a28-0e57-48eb-a725-c38680db61d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mmev44p2uz2w", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:54:32.752113Z"}</description>
      <content:encoded>{"uuid": "60766a28-0e57-48eb-a725-c38680db61d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mmev44p2uz2w", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox", "creation_timestamp": "2026-05-21T16:54:32.752113Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60766a28-0e57-48eb-a725-c38680db61d3/export</guid>
      <pubDate>Thu, 21 May 2026 16:54:32 +0000</pubDate>
    </item>
    <item>
      <title>f6f866f5-1239-49c8-b35b-9827c9ede40f</title>
      <link>https://vulnerability.circl.lu/sighting/f6f866f5-1239-49c8-b35b-9827c9ede40f/export</link>
      <description>{"uuid": "f6f866f5-1239-49c8-b35b-9827c9ede40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://t.me/GithubRedTeam/85303", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40369\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ercihan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 22:08:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-22T00:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "f6f866f5-1239-49c8-b35b-9827c9ede40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://t.me/GithubRedTeam/85303", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40369\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ercihan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 22:08:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-22T00:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6f866f5-1239-49c8-b35b-9827c9ede40f/export</guid>
      <pubDate>Fri, 22 May 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>23991f01-0dfd-4f86-8ee6-a88d7bcc9094</title>
      <link>https://vulnerability.circl.lu/sighting/23991f01-0dfd-4f86-8ee6-a88d7bcc9094/export</link>
      <description>{"uuid": "23991f01-0dfd-4f86-8ee6-a88d7bcc9094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mmgpmdzmny2m", "content": "[RSS] CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox\n\n\n voidsec.com -&amp;gt; \n\nThis is another writeup of a Windows sandbox escape that multi-collided during P2O\n\n\nOriginal-&amp;gt;", "creation_timestamp": "2026-05-22T10:21:34.886809Z"}</description>
      <content:encoded>{"uuid": "23991f01-0dfd-4f86-8ee6-a88d7bcc9094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mmgpmdzmny2m", "content": "[RSS] CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox\n\n\n voidsec.com -&amp;gt; \n\nThis is another writeup of a Windows sandbox escape that multi-collided during P2O\n\n\nOriginal-&amp;gt;", "creation_timestamp": "2026-05-22T10:21:34.886809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/23991f01-0dfd-4f86-8ee6-a88d7bcc9094/export</guid>
      <pubDate>Fri, 22 May 2026 10:21:34 +0000</pubDate>
    </item>
    <item>
      <title>f0902228-26f5-48ec-a2c0-bdaaa3183b76</title>
      <link>https://vulnerability.circl.lu/sighting/f0902228-26f5-48ec-a2c0-bdaaa3183b76/export</link>
      <description>{"uuid": "f0902228-26f5-48ec-a2c0-bdaaa3183b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mmmlnqyk2x2k", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox\nvoidsec.com/cve-2026-403...", "creation_timestamp": "2026-05-24T18:26:45.036884Z"}</description>
      <content:encoded>{"uuid": "f0902228-26f5-48ec-a2c0-bdaaa3183b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mmmlnqyk2x2k", "content": "CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox\nvoidsec.com/cve-2026-403...", "creation_timestamp": "2026-05-24T18:26:45.036884Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f0902228-26f5-48ec-a2c0-bdaaa3183b76/export</guid>
      <pubDate>Sun, 24 May 2026 18:26:45 +0000</pubDate>
    </item>
    <item>
      <title>8d65a15e-36a1-42b9-911f-b8cfa6ff400d</title>
      <link>https://vulnerability.circl.lu/sighting/8d65a15e-36a1-42b9-911f-b8cfa6ff400d/export</link>
      <description>{"uuid": "8d65a15e-36a1-42b9-911f-b8cfa6ff400d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mmnsmp5ern2o", "content": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox\nhttps://t.co/5crwyh7EXp\n\n\ud83d\udd01 RT @Dinosn | reposted by @cyb3rops\nhttps://x.com/Dinosn/status/2058080786255868047", "creation_timestamp": "2026-05-25T06:04:06.126669Z"}</description>
      <content:encoded>{"uuid": "8d65a15e-36a1-42b9-911f-b8cfa6ff400d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mmnsmp5ern2o", "content": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox\nhttps://t.co/5crwyh7EXp\n\n\ud83d\udd01 RT @Dinosn | reposted by @cyb3rops\nhttps://x.com/Dinosn/status/2058080786255868047", "creation_timestamp": "2026-05-25T06:04:06.126669Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d65a15e-36a1-42b9-911f-b8cfa6ff400d/export</guid>
      <pubDate>Mon, 25 May 2026 06:04:06 +0000</pubDate>
    </item>
    <item>
      <title>eb64d986-6d96-461b-a220-a0209d2ff73e</title>
      <link>https://vulnerability.circl.lu/sighting/eb64d986-6d96-461b-a220-a0209d2ff73e/export</link>
      <description>{"uuid": "eb64d986-6d96-461b-a220-a0209d2ff73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmt7hdzkhb32", "content": "Windows Kernel Flaw Lets Attackers Modify Memory Counters A critical vulnerability in the Windows kernel, tracked as CVE-2026-40369, has been publicly disclosed, allowing any unprivileged attacke...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-27T09:37:05.333260Z"}</description>
      <content:encoded>{"uuid": "eb64d986-6d96-461b-a220-a0209d2ff73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmt7hdzkhb32", "content": "Windows Kernel Flaw Lets Attackers Modify Memory Counters A critical vulnerability in the Windows kernel, tracked as CVE-2026-40369, has been publicly disclosed, allowing any unprivileged attacke...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-27T09:37:05.333260Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eb64d986-6d96-461b-a220-a0209d2ff73e/export</guid>
      <pubDate>Wed, 27 May 2026 09:37:05 +0000</pubDate>
    </item>
    <item>
      <title>4fb15c2e-0e81-462d-8174-13a84e794f10</title>
      <link>https://vulnerability.circl.lu/sighting/4fb15c2e-0e81-462d-8174-13a84e794f10/export</link>
      <description>{"uuid": "4fb15c2e-0e81-462d-8174-13a84e794f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmtspkuajhn2", "content": "Windows Kernel Vulnerability Allows Attackers to Modify Kernel Memory Counters A critical Windows kernel vulnerability, tracked as CVE-2026-40369, has been disclosed, enabling attackers to achieve ...\n\n#Cyber #Security #News #Vulnerability #News [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-05-27T15:21:42.690397Z"}</description>
      <content:encoded>{"uuid": "4fb15c2e-0e81-462d-8174-13a84e794f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40369", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmtspkuajhn2", "content": "Windows Kernel Vulnerability Allows Attackers to Modify Kernel Memory Counters A critical Windows kernel vulnerability, tracked as CVE-2026-40369, has been disclosed, enabling attackers to achieve ...\n\n#Cyber #Security #News #Vulnerability #News [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-05-27T15:21:42.690397Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4fb15c2e-0e81-462d-8174-13a84e794f10/export</guid>
      <pubDate>Wed, 27 May 2026 15:21:42 +0000</pubDate>
    </item>
  </channel>
</rss>
