Astra Linux – vulnerability in ruby-rails-html-sanitizer

Rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions = 1.0.3 and = 2.1.0. This issue has been patched in version 1.4.4...

Astra Linux – vulnerability in Chromium

In Google Chrome’s V8 engine, use-after-free vulnerabilities were permitted prior to version 151.0.7922.72; this allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

An integer overflow in libyuv in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page...

Astra Linux – vulnerability in Chromium

Prior to version 143.0.7499.41, using “After Free” in Media Stream within Google Chrome allowed a remote attacker to potentially exploit heap corruption by sending a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Out-of-bounds writes in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in SVG within Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in ruby-rails-html-sanitizer

Possible XSS Vulnerability in Rails::Html::Sanitizer There is a potential XSS vulnerability associated with certain configurations of Rails::Html::Sanitizer. This vulnerability has been assigned the CVE identifier CVE-2022-32209. Versions affected: ALL Not affected: NON Fixed versions: v1.4.3...

Astra Linux – vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Improper implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Integer overflow in Skia within Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Prior to version 94.0.4606.81, the “Use after free” mechanism in Google Chrome’s garbage collection allowed a remote attacker to potentially exploit heap corruption by using a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

Out-of-bounds writes in Media within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 88.0.4324.146, using “After Free” in Navigation within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape by using a specially crafted HTML page...

Astra Linux – vulnerability in Rails

An XSS vulnerability in Action Pack versions = 5.2.0 and 5.2.0 that could allow an attacker to bypass CSP for non-HTML responses...

Astra Linux – Vulnerability in Firefox

A duplicate SystemPrincipal object can be created when parsing a non-system HTML document using DOMParser::ParseFromSafeString. This could result in bypassing web security checks. This vulnerability affects Firefox versions earlier than 109...

Astra Linux - Vulnerability in Chromium

A heap buffer overflow in Blink in Google Chrome prior to version 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a specially crafted HTML page...