Astra Linux – vulnerability in Chromium

After using “free” in the Chromecast within Google Chrome prior to version 152.0.7977.65, a remote attacker could execute arbitrary code within the sandbox by sending a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Dawn in Google Chrome prior to version 151.0.7922.72, use of “after free” allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In HTML, use of “after free” in Google Chrome prior to version 151.0.7922.137 allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome on Linux, use after free in the UI was permitted prior to version 150.0.7871.125. This allowed a remote attacker to convince a user to perform certain UI gestures, thereby potentially exploiting heap corruption through a specially crafted HTML page. Chromium security severity: Hi...

Astra Linux – vulnerability in Chromium

An observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome’s V8 engine, use-after-free vulnerabilities were permitted prior to version 151.0.7922.137; this allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Out-of-bounds writes in the Codecs feature in Google Chrome prior to version 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The information disclosure vulnerability in Animation within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 150.0.7871.125, using “After Free” in Ozone within Google Chrome allowed a remote attacker to convince a user to perform certain UI gestures, thereby potentially exploiting heap corruption via a specially crafted HTML page. Chromium security severity: Critical...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 152.0.7977.65, improper authorization in GetUserMedia allowed a remote attacker to obtain sensitive information via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome’s Webpacking functionality, use after free was permitted prior to version 153.0.8010.36; this allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

A race condition in ReadAloud in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to exploit social engineering techniques to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Side-channel information leakage in Skia within Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in Input within Google Chrome allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84151

The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leadin...