Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Bluetooth within Google Chrome prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Out-of-bounds reads in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In ANGLE, using “after free” in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

The lack of authorization in SiteIsolation in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

An observable discrepancy in SVG handling in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In ANGLE, using “after free” in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

The improper implementation in Google Chrome Enterprise prior to version 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Improper implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, out-of-bounds reads in the Media plugin allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Incorrect authorization in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to exploit social engineering techniques to bypass system access restrictions by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, improper authorization in WebAppInstalls allowed a remote attacker who had compromised the renderer process and employed social engineering to bypass site isolation by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in the UI of Google Chrome prior to version 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

The information disclosure vulnerability in Skia within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...