Astra Linux – vulnerability in Chromium

Prior to version 87.0.4280.141, using “After Free” in media within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Astra Linux – vulnerability in Chromium

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Potential users of the Speech Recognizer feature in Google Chrome on Android before version 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the Content Security Policy of Google Chrome prior to version 91.0.4472.77 allowed a remote attacker to bypass the content security policy through a crafted HTML page...

Astra Linux - Vulnerability in Chromium

A "use-after-free" vulnerability in Blink in Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to potentially exploit a heap corruption via a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 89.0.4389.90, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after free in ANGLE in Google Chrome before version 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

After using “free” in the Platform in Google Chrome prior to version 152.0.7977.65, a remote attacker could execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The incorrect security UI in the Navigation tab within Google Chrome on Android prior to version 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox URL bar by using a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

The incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page...

Astra Linux – vulnerability in Chromium

Improper implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 150.0.7871.47, using “After Free” in the Cast Receiver in Google Chrome allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of performance APIs in Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the iFrameSandbox of Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – vulnerability in Chromium

In Google Chrome’s WebRTC implementation, use of “after free” prior to version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Python-Django

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the chars and words methods from django.utils.text.Truncator when used with html=True are susceptible to a potential DoS denial of service attack due to certain inputs containing very long, potentially malformed HTML text. The...

Astra Linux – vulnerability in Chromium

After free in Google Chrome Profiles prior to 95.0.4638.54 allowed a remote attacker who convinced a user to perform certain gestures to potentially exploit heap corruption via a specially crafted HTML page...