Dossier
sandbox escape
Coverage of sandbox escape in the Nexus archive.
- Chrome needs another whopper update to fix 382 security bugs
Google released a Chrome update addressing 382 security vulnerabilities, including 15 critical flaws that could enable sandbox escapes. The update, version 150.0.7871.47, includes fixes for a high-severity vulnerability (CVE-2026-13789) allowing remote attackers to perform sandbox escapes via a crafted HTML page.
- Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool
Google addressed a critical remote code execution (RCE) vulnerability in its AI-based Antigravity Tool. The flaw, a prompt injection vulnerability in an agentic AI product for filesystem operations, stemmed from a sanitization issue enabling sandbox escape and arbitrary code execution.