writeups.xyz / Enter "Sandbreak" - Vulnerability In vm2 Sandbox Module Enables Remote Code Execution (CVE-2022-36067)

Submitter : c2a

Date: 10 October 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Sandbox Bypass

Programs :

• Vm2

Authors :

• Oxeye (@OxeyeSecurity)

Link :
https://www.oxeye.io/blog/vm2-sandbreak-vulnerability-cve-2022-36067