Bytecode Alliance

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 26, 2026
Last mentioned16d ago

Timeline

1 articles · newest first

Two critical Wasmtime flaws let malicious WebAssembly modules escape the sandbox

CVE-2026-115889 affects every architecture and CVE-2026-115893 only ARM64; fixes landed October 19–20 with no attacks reported.

The Hacker NewsOct 26, 11:52 UTC · 16d agoVulnerabilityCVE-2026-115889 CVE-2026-1158932

Related CVEs

by mentions

CVE-2026-115893<1%9.9
Wasmtime Cranelift sandbox escape on aarch64
published 18d agoWasmtimePoC
CVE-2026-115889<1%9.9
Cranelift SSA index overflow in Wasmtime before 36.0.19 and 43.0.0
published 18d agoWasmtimePoC

Appears with

CISAorganization · 1
Wasmtimeproduct · 1
Spinproduct · 1
Craneliftproduct · 1

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 16d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.