Astra Linux – vulnerability in Chromium

Prior to version 87.0.4280.141, using “After free” in Google Chrome’s autofill functionality allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape by using a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

In Google Chrome, the use of "after free" in protocol handling before version 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 92.0.4515.107, use-after-free vulnerabilities in dialog box handling allowed attackers who convinced users to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – vulnerability in Chromium

Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Leakage of side-channel information in DevTools in Google Chrome prior to version 94.0.4606.54 allowed a remote attacker to bypass site isolation through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in the Chromecast within Google Chrome allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 93.0.4577.82, using V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Improper implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the File System API of Google Chrome prior to version 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Incorrect security user interfaces in Page Info in Google Chrome on iOS prior to version 88.0.4324.96 allowed a remote attacker to spoof the security user interface through a crafted HTML page...

Astra Linux – vulnerability in ruby-rails-html-sanitizer

Rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions = 1.0.3 and = 2.1.0. This issue has been patched in version 1.4.4...

Astra Linux – vulnerability in Chromium

In Google Chrome’s V8 engine, use-after-free vulnerabilities were permitted prior to version 151.0.7922.72; this allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

An integer overflow in libyuv in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...