CVE-2026-10037: Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal
Canonical · Ubuntu
Vendor fix available · Affected: Canonical Ubuntu · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 7% of scored CVEs
DescriptionCVE.org
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.
Affected products10
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · UbuntuVersions not stated
- Canonical · Ubuntubefore 3.70+nmu1ubuntu1.22.04.1; before 3.70+nmu1ubuntu1.24.04.1; before 3.74ubuntu1.1; before 3.75ubuntu1.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2026-10037 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.