Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fixed a null pointer dereference in loadvideobinaries. The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed by a dereference of mycs-yuvscalerbinary after the following call chai...

Astra Linux – Vulnerability in Firefox

By using 3D CSS in conjunction with JavaScript, content could be rendered outside the webpage’s viewport. This led to a spoofing attack that could be used for phishing or other attacks against users. This vulnerability affects Firefox versions earlier than 88...

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved by adding additional restrictions on CSS compositing. This issue has been fixed in tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Visiting a maliciously crafted website may reveal a user’s browsing history...

Astra Linux – Vulnerability in Firefox and Thunderbird

Firefox behaved slightly differently for already-known resources when loading CSS resources that involved CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

Astra Linux – Vulnerability in Firefox and Thunderbird

An attacker could have injected CSS into stylesheets that are accessible via internal URIs, such as resource:, thereby bypassing a page’s Content Security Policy. This vulnerability affects Firefox ESR 91.11, Thunderbird 102, Thunderbird 91.11, and Firefox 101...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

MAL-2026-17547 Malicious code in css-at-scope-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d8d974b7fabf04fa662971cd8041fb76775bf5ed2902cbbffed0f881e2036d Package is published under a CSS-polyfill name but ships thunderboltRegistry.js, which exports Wix internal registry module names thunderboltRegistry...

Malicious code in css-at-scope-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d8d974b7fabf04fa662971cd8041fb76775bf5ed2902cbbffed0f881e2036d Package is published under a CSS-polyfill name but ships thunderboltRegistry.js, which exports Wix internal registry module names thunderboltRegistry...

Malicious code in css-svqggc-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b23cf39720388bcf9f26621bd52e256e18a011bf3b6821b7d9f5f60115b9663 Package masquerades as a CSS polyfill while impersonating internal Wix Thunderbolt registry modules thunderboltRegistry, siteAssetsRegistry,...

MAL-2026-17557 Malicious code in css-svqggc-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b23cf39720388bcf9f26621bd52e256e18a011bf3b6821b7d9f5f60115b9663 Package masquerades as a CSS polyfill while impersonating internal Wix Thunderbolt registry modules thunderboltRegistry, siteAssetsRegistry,...

MAL-2026-17552 Malicious code in css-hgwctv-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1103a16c6f933686f07e8ce94068057f49e5cf2f0a6a9ccf01f2baeb7cfe95 On require, thunderboltRegistry.js runs an immediately-invoked function that uses childprocess.execSync to collect host identity and network...

Malicious code in css-hgwctv-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1103a16c6f933686f07e8ce94068057f49e5cf2f0a6a9ccf01f2baeb7cfe95 On require, thunderboltRegistry.js runs an immediately-invoked function that uses childprocess.execSync to collect host identity and network...

MAL-2026-17554 Malicious code in css-mpmdds-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bac0cb0a2c693985668a890ff2ace72ff2d00dac60bc5470a77160c4d765106 The package presents itself as a CSS polyfill but ships thunderboltRegistry.js which runs an IIFE at module load. The IIFE acquires childprocess via...

Malicious code in css-mpmdds-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bac0cb0a2c693985668a890ff2ace72ff2d00dac60bc5470a77160c4d765106 The package presents itself as a CSS polyfill but ships thunderboltRegistry.js which runs an IIFE at module load. The IIFE acquires childprocess via...

MAL-2026-17558 Malicious code in css-txedrf-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d70c660ff3138360df0239fc6ef3db7beaca61ca069bc2d108ed893c68acb63 thunderboltRegistry.js executes an IIFE at require time that runs OS reconnaissance commands id, whoami, uname -a, ifconfig/ip addr, cat /etc/hosts v...

Malicious code in css-txedrf-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d70c660ff3138360df0239fc6ef3db7beaca61ca069bc2d108ed893c68acb63 thunderboltRegistry.js executes an IIFE at require time that runs OS reconnaissance commands id, whoami, uname -a, ifconfig/ip addr, cat /etc/hosts v...

MAL-2026-17551 Malicious code in css-gvqmfn-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb3f332a818748252e49dcf21ffb6949c531afd401ee697cc08ba00a067ae30 css-gvqmfn-polyfill mimics Wix internal @wix/thunderbolt- CSS polyfill naming and ships a Proxy-based cover stub that re-exports registry names...

Malicious code in css-gvqmfn-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb3f332a818748252e49dcf21ffb6949c531afd401ee697cc08ba00a067ae30 css-gvqmfn-polyfill mimics Wix internal @wix/thunderbolt- CSS polyfill naming and ships a Proxy-based cover stub that re-exports registry names...