Daisuke Hatakeyama

Stack-based buffer overflow vulnerability in Apache HTTP Server's mod vhost alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69.

A use after free issue exists in Extensions, where a remote attacker could use social engineering to potentially execute arbitrary code outside the sandbox by utilizing a crafted Chrome extension. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Improper resource control in Linux Toolkit Theming allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HTML page.

Incomplete cleanup in the `GetUserMedia()` function allows a remote attacker to obtain cross-origin data. This occurs when an attacker has already compromised the renderer process and uses social engineering to lure a user to a crafted HTML page.

A sandbox escape exists in Firefox and Firefox Focus for Android. A sandbox is a security mechanism used to isolate running applications from the rest of the system to prevent malicious code from accessing sensitive data or system resources.