Astra Linux – vulnerability in libfile-find-rule-perl

File::Find::Rule up to version 0.34 for Perl is vulnerable to arbitrary code execution when grep encounters a specially crafted filename. A file handle is opened using the 2-argument form of open, allowing an attacker-controlled filename to supply the MODE parameter to open, thereby turning the...

Astra Linux – vulnerability in webkit2gtk

The use-after-free issue has been resolved through improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, and iTunes 12.11 for Windows. Processing maliciously crafted web content may result...

Astra Linux – vulnerability in webkit2gtk

The use-after-free issue has been resolved through improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4, and iPadOS 15.4, as well as tvOS 15.4. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – vulnerability in glibc

The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc up to version 2.34 copies its path argument from the stack without validating its length. This can lead to a buffer overflow, potentially resulting in a denial of service or, if an application ...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 152.0.7977.75, an uninitialized resource in V8 allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in WebKit2GTK

A “use-after-free” issue has been addressed through improved memory management. This issue is fixed in watchOS 10, iOS 17, iPadOS 17, tvOS 17, macOS Sonoma 14, and Safari 17. Processing web content may lead to arbitrary code execution...

Astra Linux – Vulnerability in ffmpeg

In FFmpeg versions prior to 5.1.2, the libavcodec/pthreadframe.c file, used in VLC and other products, leaves stale hwaccel state in worker threads. This allows attackers to trigger a use-after-free and execute arbitrary code under certain circumstances e.g., during hardware reinitialization upon...

Astra Linux – Vulnerability in ffmpeg5

The Ffmpeg v.N113007-g8d24a28d06 contains a buffer overflow vulnerability that allows a local attacker to execute arbitrary code through libavutil/imgutils.c:353:9 in the imagecopyplane function...

Astra Linux – vulnerability in Firefox and Thunderbird

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been...

Astra Linux – vulnerability in Chromium

The lack of authorization checks in Extensions in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via specially crafted network traffic. Chromium security severity: Medium...

Astra Linux – vulnerability in Thunderbird

The Mozilla Fuzzing Team has reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs exhibited signs of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in the Receiver extension within Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox by sending specially crafted network traffic. Chromium security severity: High...

Astra Linux – vulnerability in Firefox

Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

Astra Linux – vulnerability in Firefox

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 145 and Thunderbird 145...

Astra Linux - vulnerability in pillow

In Pillow versions prior to 9.0.0, PIL.ImageMath.eval enables evaluation of arbitrary expressions—including those that utilize the Python exec method. A lambda expression can also be used...

Astra Linux - vulnerability in pillow

Pillow 10.1.0 allows arbitrary code execution via the environment parameter using PIL.ImageMath.eval; this is a different vulnerability from CVE-2022-22817, which involved the expression parameter...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Core in Google Chrome on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

Astra Linux – Vulnerability in pyyaml

A vulnerability was discovered in the PyYAML library in versions prior to 5.4. In these versions, the library is susceptible to arbitrary code execution when it processes untrusted YAML files using the fullload method or the FullLoader loader. Applications that use this library to process untrust...

Astra Linux – vulnerability in libnbd

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

EUVD-2026-102157

A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...