Trust Boundary Violation

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Visual Studio Code Python Extension Remote Code Execution VulnerabilityCVE-2024-49050Microsoft · CVSS 8.8 · 1.3% likely

   Microsoft

2. Context isolation bypass via contextBridge in ElectronCVE-2020-4077electron · CVSS 7.7 · 1.0% likely

   Electron

3. Context isolation bypass via Promise in ElectronCVE-2020-15096electron · CVSS 6.8 · 0.8% likely

   Electron

4. Code execution vulnerability in SWIG code generation in cmd/goCVE-2026-27140Go toolchain · CVSS 8.8 · 0.7% likely

   Go toolchain

5. Kubevirt-csi: persistentvolume allows access to hcp's root nodeCVE-2024-1725Red Hat · CVSS 6.5 · 0.6% likely

   Red Hat

6. Creation of a new configuration by posting a malicious ID to MQTTCVE-2026-44091Phoenix Contact · CVSS 9.1 · 0.6% likely

   Phoenix Contact

7. Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise ServerCVE-2025-48938cli · CVSS 2.6 · 0.6% likely

   Cli

8. Improper trust boundary implementation for SMB in Zoom ClientsCVE-2023-28597Zoom Video Communications Inc · CVSS 8.3 · 0.5% likely

   Zoom Video Communications, Inc.

9. Visual Studio Code Python Extension Remote Code Execution VulnerabilityCVE-2025-49714Microsoft · CVSS 7.8 · 0.5% likely

   Microsoft

10. Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-121665Microsoft · CVSS 8.8 · 0.4% likely

    Microsoft

11. Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumesCVE-2019-0035Juniper Networks · CVSS 6.8 · 0.4% likely

    Juniper Networks

12. Context isolation bypass via leaked cross-context objects in ElectronCVE-2020-4076electron · CVSS 7.8 · 0.4% likely

    Electron

13. DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTagsCVE-2026-65902cure53 · CVSS 6.1 · 0.4% likely

    Cure53

14. A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat…CVE-2022-20826Cisco · CVSS 6.4 · 0.4% likely

    Cisco

15. Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabledCVE-2025-1118Redhat · CVSS 4.4 · 0.3% likely

    Red Hat

16. Windows Device Health Attestation (DHA) Elevation of Privilege VulnerabilityCVE-2026-33828Microsoft · CVSS 7.8 · 0.3% likely

    Microsoft

17. Incorrect signature verification on Google play-services-basement in Google Play SDKCVE-2022-1799Google LLC · CVSS 5.7 · 0.3% likely

    Google

18. Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpointCVE-2025-14542CVSS 7.5 · 0.3% likely
19. Docker Desktop 4.11.x allows --no-windows-containers flag bypassCVE-2023-0627Docker Inc. · CVSS 6.7 · 0.3% likely

    Docker

20. A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a…CVE-2024-20265Cisco · CVSS 5.9 · 0.2% likely

    Cisco

21. Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socketCVE-2026-62146Red Hat · CVSS 7.8 · 0.2% likely

    Red Hat

22. NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information discl…CVE-2026-24153NVIDIA · CVSS 5.2 · 0.1% likely

    NVIDIA

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.