Skip to content
OpenAdvisories

Weakness (CWE)

CWE-501: Trust Boundary Violation

Class Draft

The product mixes trusted and untrusted data in the same data structure or structured message.

Source: MITRE CWE-501

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2026-62146 Public exploit

    Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket

    A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-si…

    Red Hat Red Hat OpenShift Container Platform 5 Red Hat OpenShift Container Platform 4.16
  • High 7.5
    CVE-2025-61884 Exploited · Ransomware Public exploit EPSS 96%

    Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions…

    Oracle Oracle Configurator
    KEV Oct 20, 2025
  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …

    IETF DHCP openvpn libreswan Ubuntu