Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed…

sciencesecurity

Sources

Vulnerabilities

Why this score
Signals contributing to the severity score
SignalPoints
cvss critical — 9.320
widely deployed15