Product
Wasmtime
- First Reported
- Oct 26, 2026
- Latest Reported
- Oct 31, 2026
Reported Context (3)
- Upgrade Wasmtime to versions 36.0.19 or 43.0.0. CYFIRMA’s Fortnightly Exploit Radar Highlights Five Vulnerabilities
- Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. Critical Wasmtime Flaws Could Enable WebAssembly Sandbox Escapes
- Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. Two Critical Wasmtime Flaws Could Enable WebAssembly Sandbox Escape
CVE (7)
People (2)
Vendors (3)
Products (5)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.