WebAssembly — Vulnerabilities & Security Advisories 11

WebAssembly enables high-performance client-side and server-side applications, commonly used for games, video editing, and computational tasks. Historically, it has faced vulnerabilities like remote code execution, cross-site scripting, and privilege escalation, often stemming from memory corruption flaws and insecure sandbox implementations. While designed with security in mind, allowing sandboxed execution, its interaction with JavaScript and native code has introduced attack vectors. Notable incidents include memory safety issues in early implementations and vulnerabilities in runtimes that could bypass security restrictions. With 10 CVEs recorded, security remains a focus area as adoption grows.