Astra Linux – vulnerability in Chromium

Improper implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Prior to version 142.0.7444.59, using “After Free” in Ozone within Google Chrome on Linux and ChromeOS allowed a remote attacker to potentially exploit object corruption via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In WebAudio in Google Chrome prior to version 91.0.4472.114, using “after free” allowed remote attackers to potentially exploit heap corruption by sending a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

Prior to version 87.0.4280.88, using “After Free” in the clipboard within Google Chrome allowed a remote attacker to potentially exploit heap corruption by sending a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 96.0.4664.45, use of “After Free In Media” allowed remote attackers to potentially exploit heap corruption via a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

Improper implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in the Input handling mechanism in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chrome security severity: Medium...

Astra Linux – vulnerability in Chromium

Out-of-bounds reads in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome before version 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Out-of-bounds reads in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

An integer overflow in ANGLE in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux - vulnerability in htmldoc

HTMLDOC v1.9.18 contains a buffer overflow in the parsepre function, ps-pdf.cxx:5681...

Astra Linux – Vulnerability in Chromium

Before version 93.0.4577.82, using the "after free" method in the Selection API in Google Chrome allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page, as long as that attacker could convince the user to visit a malicious website...

Astra Linux – vulnerability in Firefox and Thunderbird

When injecting an HTML base element, certain requests ignore the CSP’s base-uri settings and instead use the base of the injected element. This vulnerability affects Firefox ESR 102.3, Thunderbird 102.3, and Firefox 105...

Astra Linux – vulnerability in Firefox

SVG use tags referencing a same-origin document could have led to script execution if attacker input was sanitized via the HTML Sanitizer API. This would require the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects Firefox 102...

Astra Linux – Vulnerability in Firefox

The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however, it incorrectly did not sanitize the xlink:href attributes. This vulnerability affects Firefox versions earlier than 102...

Astra Linux – Vulnerability in Firefox

Firefox’s HTML parser did not correctly interpret HTML comment tags, leading to inconsistencies with other browsers. This vulnerability could have been exploited to embed user-controlled data within HTML comments on pages. This issue affects Firefox versions prior to 101...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.101, using “After Free” in Google Chrome extensions allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...