Containers on fire: from container escapes to supply chain attacksKaspersky Securelist·Jun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736CVE-2022-0492CVE-2024-21626160
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·May 11, 03:55 UTC · May 11, 2026VulnerabilityCVE-2026-24118CVE-2026-24120CVE-2023-37466+11 CVEs60
The reality of container escapesHelp Net Security·Jan 16, 13:32 UTC · Jan 16, 2023Exploit / PoC in the wild60
Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud EnvironmentsPalo Alto Unit 42·Jun 6, 12:35 UTC · Jun 6, 2024Malware155
Chrome sandbox escape nets security researcher $250,000 rewardSecurity Affairs·Aug 11, 16:58 UTC · Aug 11, 2025Exploit / PoC in the wildCVE-2025-4609CVE-2025-278360
VMware releases security patches for a critical virtual machine escape flawSecurity Affairs·Nov 9, 20:48 UTC · Nov 9, 2018VulnerabilityCVE-2018-6981CVE-2018-698260
Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape AttacksSecurity Affairs·Jul 7, 07:07 UTC · Jul 7, 2026Exploit / PoCCVE-2026-53359CVE-2026-46316CVE-2026-43284+1 CVEs60
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·Jan 29, 06:05 UTC · Jan 29, 2026VulnerabilityCVE-2026-22709CVE-2022-36067CVE-2023-29017+5 CVEs160
CVE-2025-22225 in VMware ESXi now used in active ransomware attacksSecurity Affairs·Feb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225CVE-2025-22226CVE-2025-2222460
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n ProcessThe Hacker News·Jul 27, 13:05 UTC · Jul 27, 2026Exploit / PoC in the wildCVE-2026-2757760
RunC Flaws Enable Container Escapes, Granting Attackers Host AccessThe Hacker News·Feb 5, 08:03 UTC · Feb 5, 2024Exploit / PoC in the wildCVE-2024-21626CVE-2024-23651CVE-2024-23652+2 CVEs160
Pyodide Sandbox Escape Enables Remote Code Execution in GristInfosecurity Magazine·Jan 27, 16:45 UTC · Jan 27, 2026Vulnerability55
China-Linked Hackers Exploit VMware ESXi ZeroThe Hacker News·Jan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
Docker fixes critical Desktop flaw allowing container escapesSecurity Affairs·Aug 25, 22:30 UTC · Aug 25, 2025Exploit / PoCCVE-2025-9074160
VMware urgent updates addressed Critical ESXi Sandbox Escape bugsSecurity Affairs·Mar 5, 21:47 UTC · Mar 5, 2024VulnerabilityCVE-2024-22252CVE-2024-22253CVE-2024-22254+1 CVEs60
VirtualBox Guest-to-Host escape 0day and exploit released onlineHelp Net Security·Dec 15, 12:32 UTC · Dec 15, 2023Exploit / PoC60
VMware fixed critical VM Escape bug demonstrated at Geekpwn hacking contestSecurity Affairs·Dec 14, 07:57 UTC · Dec 14, 2022VulnerabilityCVE-2022-31705CVE-2022-31702CVE-2022-3170360
Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBoxCyberScoop·Jan 26, 19:06 UTC · Jan 26, 2018Vulnerability in the wildCVE-2018-2698CVE-2018-2694CVE-2017-5753+2 CVEs60
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux HostsThe Hacker News·Aug 6, 17:58 UTC · Aug 6, 2026Exploit / PoC in the wildCVE-2026-64561CVE-2026-53359CVE-2026-4631660
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux DistrosThe Hacker News·Jul 8, 06:16 UTC · Jul 8, 2026VulnerabilityCVE-2026-43499CVE-2026-53166CVE-2026-46242+2 CVEs160
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 SystemsThe Hacker News·Jul 7, 04:58 UTC · Jul 7, 2026Exploit / PoCCVE-2026-53359CVE-2026-43284CVE-2026-43500+2 CVEs60
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container EscapeThe Hacker News·Apr 22, 07:16 UTC · Apr 22, 2026VulnerabilityCVE-2026-5752160
Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete TakeoverThe Hacker News·May 4, 08:19 UTC · May 4, 2024VulnerabilityCVE-2024-28185CVE-2024-28189CVE-2024-2902160
Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)Help Net Security·Apr 24, 13:36 UTC · Apr 24, 2023VulnerabilityCVE-2022-3606760
Researchers disclose sandbox escape bug in vm2 sandbox librarySecurity Affairs·Apr 9, 20:34 UTC · Apr 9, 2023Exploit / PoCCVE-2023-29017CVE-2022-3606760
New Docker Container Escape Bug Affects Microsoft Azure FunctionsThe Hacker News·Jan 27, 15:59 UTC · Jan 27, 2021Exploit / PoC160
Kaspersky researchers warns Linkedin from potential spear phishingKaspersky Securelist·Jul 23, 11:59 UTC · Jul 23, 2015Phishing & fraud55
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026Security Affairs·Jul 21, 06:08 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-687560
Mem3nt0 moriKaspersky Securelist·Oct 27, 03:00 UTC · Oct 27, 2025Exploit / PoC in the wildCVE-2025-278360
Critical Versa Concerto Flaws Let Attackers Escape Docker and Compromise HostsThe Hacker News·May 23, 04:44 UTC · May 23, 2025Exploit / PoC in the wildCVE-2025-34025CVE-2025-34026CVE-2024-45410+1 CVEs160
Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)Help Net Security·Apr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-2857CVE-2025-278360
Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security CopilotHelp Net Security·Mar 30, 00:00 UTC · Mar 30, 2025RansomwareCVE-2025-2783CVE-2025-2857CVE-2025-2825+1 CVEs160
VMware sandbox escape bugs are so critical, patches are released for end-ofArs Technica · Security·Mar 6, 20:19 UTC · Mar 6, 2024VulnerabilityCVE-2024-22252CVE-2024-22253CVE-2024-22254+1 CVEs60
War crimes committed through cyberspace must not escape international justice, says Estonian presidentThe Record·Jun 5, 12:20 UTC · Jun 5, 2023Threat actor60
Reverse RDP Attack Also Enables Guest-to-Host Escape in Microsoft Hyper-VThe Hacker News·Aug 8, 07:21 UTC · Aug 8, 2019VulnerabilityCVE-2019-088760
Critical RCE Flaw Found in OpenVPN that Escaped Two Recent Security AuditsThe Hacker News·Jun 22, 08:19 UTC · Jun 22, 2017VulnerabilityCVE-2017-7521CVE-2017-7520CVE-2017-7508+1 CVEs60
Anthropic Reveals Claude Escaped Testing, Breaching Three CompaniesInfosecurity Magazine·Jul 31, 08:35 UTC · Jul 31, 2026Vulnerability55
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat BenchmarkThe Hacker News·Jul 22, 20:30 UTC · Jul 22, 2026Exploit / PoC60
Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code executionCyberScoop·Apr 21, 15:43 UTC · Apr 21, 2026Vulnerability in the wild60