Login Request a demo
PA
Vendor
patriksimek
1 product with CVEs on record
69
CVEs
0
On KEV
0
New 30D
Products
VM
vm2
patriksimek
10.0
69 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-100723
VM
vm2
patriksimek
7.5
0%
Sep 27vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool
CVE-2026-100722
VM
vm2
patriksimek
6.8
0%
Sep 27vm2 before 3.12.2 Host Process Termination via Construct Trap
CVE-2026-100721
VM
vm2
patriksimek
9.0
1%
Sep 27vm2 before 3.12.2 Authorization Bypass via Custom Resolver
CVE-2026-93606
VM
vm2
patriksimek
10.0
1%
Sep 18vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
CVE-2026-93605
VM
vm2
patriksimek
10.0
1%
Sep 18vm2 NodeVM before 3.12.1 Remote Code Execution via child_process
CVE-2026-93604
VM
vm2
patriksimek
7.2
0%
Sep 18vm2 3.11.8 Sandbox Escape via crypto.setFips
CVE-2026-93603
VM
vm2
patriksimek
10.0
1%
Sep 18vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
CVE-2026-92963
VM
vm2
patriksimek
5.3
0%
Sep 17vm2 before 3.11.2 Information Disclosure via Internal State
CVE-2026-92962
VM
vm2
patriksimek
2.1
0%
Sep 17vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js
CVE-2026-92961
VM
vm2
patriksimek
7.5
1%
Sep 17vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass
CVE-2026-92960
VM
vm2
patriksimek
10.0
0%
Sep 17vm2 before 3.11.6 Process-wide State Exposure via os and dns
CVE-2026-92959
VM
vm2
patriksimek
7.1
0%
Sep 17vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
CVE-2026-92958
VM
vm2
patriksimek
8.5
0%
Sep 17vm2 before 3.11.7 Denylist Bypass via fs/promises
CVE-2026-92957
VM
vm2
patriksimek
9.9
1%
Sep 17vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix
CVE-2026-92956
VM
vm2
patriksimek
10.0
1%
Sep 17vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming
CVE-2026-92955
VM
vm2
patriksimek
10.0
1%
Sep 17vm2 before 3.11.8 Sandbox Escape via NodeVM
CVE-2026-92954
VM
vm2
patriksimek
8.6
0%
Sep 17vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise
CVE-2026-92953
VM
vm2
patriksimek
10.0
1%
Sep 17vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
CVE-2026-92952
VM
vm2
patriksimek
6.8
0%
Sep 17vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass
CVE-2026-92951
VM
vm2
patriksimek
9.9
1%
Sep 17vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver
CVE-2026-92950
VM
vm2
patriksimek
8.6
0%
Sep 17vm2 before 3.11.7 Sandbox Escape via CLI require
CVE-2026-92949
VM
vm2
patriksimek
4.0
0%
Sep 17vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor
CVE-2026-92948
VM
vm2
patriksimek
9.9
1%
Sep 17vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
CVE-2026-92947
VM
vm2
patriksimek
10.0
0%
Sep 17vm2 before 3.11.7 Memory Disclosure via Buffer Pool
CVE-2026-92946
VM
vm2
patriksimek
10.0
1%
Sep 17vm2 before 3.11.7 Remote Code Execution via require.external
CVE-2026-92945
VM
vm2
patriksimek
4.2
0%
Sep 17vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matching
CVE-2026-92944
VM
vm2
patriksimek
9.8
1%
Sep 17vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector
CVE-2026-92942
VM
vm2
patriksimek
7.5
0%
Sep 17vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry
CVE-2026-92941
VM
vm2
patriksimek
10.0
0%
Sep 17vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation
CVE-2026-92940
VM
vm2
patriksimek
10.0
0%
Sep 17vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent
CVE-2026-92939
VM
vm2
patriksimek
9.9
1%
Sep 17vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
CVE-2026-92938
VM
vm2
patriksimek
9.9
1%
Sep 17vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite
CVE-2026-92937
VM
vm2
patriksimek
10.0
1%
Sep 17vm2 3.11.6 Remote Code Execution via Promise call/apply
CVE-2026-92936
VM
vm2
patriksimek
5.8
0%
Sep 17vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack
CVE-2026-92935
VM
vm2
patriksimek
9.0
1%
Sep 17vm2 NodeVM Remote Code Execution via Array-Shaped Require
CVE-2026-92934
VM
vm2
patriksimek
9.0
1%
Sep 17vm2 before 3.11.8 Sandbox Escape RCE via AggregateError
CVE-2026-92933
VM
vm2
patriksimek
5.8
0%
Sep 17vm2 before 3.11.8 Information Disclosure via util.getCallSites
CVE-2026-47683
VM
vm2
patriksimek
8.7
1%
Aug 17vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
CVE-2026-47686
VM
vm2
patriksimek
9.9
1%
Aug 17vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE
CVE-2026-47698
VM
vm2
patriksimek
9.8
1%
Aug 17vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
CVE-2026-47141
VM
vm2
patriksimek
6.9
0%
Jun 12vm2: NodeVM observability builtins leak host process and HTTP request data
CVE-2026-47210
VM
vm2
patriksimek
9.8
2%
Jun 12vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass
CVE-2026-47208
VM
vm2
patriksimek
10.0
1%
Jun 12vm2: Sandbox Breakout Using Promise Species
CVE-2026-47140
VM
vm2
patriksimek
10.0
1%
Jun 12vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution
CVE-2026-47139
VM
vm2
patriksimek
8.6
0%
Jun 12vm2: NodeVM network builtin exclusions bypass via internal _http_client and _http_server
CVE-2026-47137
VM
vm2
patriksimek
10.0
0%
Jun 12vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE
CVE-2026-47135
VM
vm2
patriksimek
8.7
0%
Jun 12vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks
CVE-2026-47131
VM
vm2
patriksimek
10.0
1%
Jun 12vm2: Sandbox Escape
CVE-2026-47209
VM
vm2
patriksimek
8.6
0%
Jun 12vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain
CVE-2026-44005
VM
vm2
patriksimek
10.0
1%
May 13vm2: Sandbox escape
CVE-2026-45411
VM
vm2
patriksimek
9.8
1%
May 13vm2: Sandbox Breakout Using Async Generator
CVE-2026-44009
VM
vm2
patriksimek
9.8
1%
May 13vm2: Sandbox Breakout Through Null Proto Exception
CVE-2026-44008
VM
vm2
patriksimek
9.8
1%
May 13vm2: Snabox breakout via `neutralizeArraySpeciesBatch`
CVE-2026-44007
VM
vm2
patriksimek
9.1
1%
May 13vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution
CVE-2026-44006
VM
vm2
patriksimek
10.0
1%
May 13vm2: Sandbox Escape
CVE-2026-44004
VM
vm2
patriksimek
7.5
0%
May 13vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)
CVE-2026-44003
VM
vm2
patriksimek
5.8
0%
May 13vm2: Transformer Fast-Path Bypass Exposes Internal State Variable
CVE-2026-44002
VM
vm2
patriksimek
5.8
0%
May 13vm2: Host File Path Disclosure via Stack Trace Information Leak
CVE-2026-44001
VM
vm2
patriksimek
8.6
0%
May 13vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
CVE-2026-44000
VM
vm2
patriksimek
7.2
0%
May 13vm2: sandbox boundary bypass via host Promise resolution preserving host object identity