CyberHighConfirmedAccelerating
8.3
Critical Microsoft Entra ID Remote Code Execution Vulnerability Exploited in Wild
The Hacker News·US·4 days ago
A type confusion vulnerability in the V8 JavaScript engine allows for sandbox escapes and remote code execution (RCE) on the host process. The exploit demonstrates a significant failure in isolated-vm security boundaries, posing a high risk to environments relying on V8 for process isolation.