Winehq
Monthly
Sandbox escape in Wine (versions 0.9 through 11.0) arises because Wine installs a .desktop entry that registers itself as the MIME handler for EXE and other Windows executable types, so opening such a file causes it to be executed with the invoker's permissions. Because MIME handlers are treated as trusted for user-launched documents, an attacker who gets an EXE handled inside a Flatpak or Snap confinement can break out of that sandbox and run code with the user's normal privileges. This is a disputed issue with no public exploit identified at time of analysis, a very low EPSS (0.02%), and no CISA KEV listing; maintainers argue no fix exists without a severe usability loss.
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact because the attacker controls the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by triggering a large. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.
Sandbox escape in Wine (versions 0.9 through 11.0) arises because Wine installs a .desktop entry that registers itself as the MIME handler for EXE and other Windows executable types, so opening such a file causes it to be executed with the invoker's permissions. Because MIME handlers are treated as trusted for user-launched documents, an attacker who gets an EXE handled inside a Flatpak or Snap confinement can break out of that sandbox and run code with the user's normal privileges. This is a disputed issue with no public exploit identified at time of analysis, a very low EPSS (0.02%), and no CISA KEV listing; maintainers argue no fix exists without a severe usability loss.
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact because the attacker controls the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by triggering a large. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.