Neonix Security

Improper state validation in XML allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin, by using a crafted HTML page.

Improper resource exposure in the Object Request Broker (ORB), a component that manages communication between different software objects, allows a remote attacker to bypass site isolation by using a specially crafted HTML page.

A use after free issue exists in the Input component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, allowing the execution of arbitrary code within the sandbox.

An uninitialized resource in WebGPU allows a remote attacker to obtain cross-origin data by using a crafted HTML page. WebGPU is a modern API that provides high-performance graphics and compute capabilities to web applications.