CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox
Updated:
Executive Summary
[object Object]
Analysis
Originally published by r/cybersecurity on May 21, 2026.
Related Threats
Patch Tuesday - May 2026
Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild or public disclosure for any of these vulnerabilities. So far this month, Microsoft has provided patches to address 133 browser vulnerabilities, which are not included in the Patch Tuesday count above. Windows Netlogon: critical RCE Anyone responsible for securing a domain con
CIOs and HR Leaders Must Redesign Work for AI
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cios-hr-leaders-must-redesign-work-for-ai-image_small-4-a-33254.jpg" align=right hspace=4><b>Survey: Organizations Must Clarify Accountability as Leadership Roles Shift</b><br>AI is changing how work is divided and decisions are made, while many organizations still haven't clarified who owns AI-related choices and outcomes. CIOs c
Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c