Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

An improper implementation in Chromoting within Google Chrome on Linux prior to version 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and pskbcarveinsidenonlinear both copy the old skbsharedinfo header into a new buffer via memcpy, which includes the destructorarg pointer uar...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Core in Google Chrome on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.52, out-of-bounds reads in DataTransfer allowed a local attacker to exploit social engineering techniques to read memory outside the sandbox using a local program. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux

A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...

Astra Linux – Vulnerability in unbound

Unbound from NLnet Labs, including versions up to and including 1.12.0, and NSD from NLnet Labs, including versions up to and including 4.3.3, contain a local vulnerability that allows for a local symlink attack. When creating the PID file, Unbound and NSD either create the file if it does not...

Astra Linux – vulnerability in linux, linux-5.10

In various setup methods of the USB gadget subsystem, there is a possible out-of-bounds write due to an incorrect flag check. This could lead to local privilege escalation without requiring any additional execution privileges. No user interaction is needed for exploitation. Product: Android;...

Astra Linux - vulnerability in linux

A flaw was found in the Linux kernel. A use-after-free occurred in how the console subsystem utilized ioctls KDGKBSENT and KDSKBSENT. A local user could exploit this flaw to gain read memory access beyond the allocated bounds. The primary threat posed by this vulnerability is data confidentiality...

Astra Linux – Vulnerability in Git

Git is an open-source, scalable, distributed version control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are vulnerable to exposure of sensitive information by malicious actors. When performing a local clone where the source and target of the clone...

Astra Linux – Vulnerability in binutils

A flaw has been discovered in GNU Binutils 2.45. The affected function is bfdelfparseehframe in the file bfd/elf-eh-frame.c of the Linker component. Executing certain manipulations can lead to a heap-based buffer overflow. This attack is limited to local executions. The exploit has been published...

Astra Linux – Vulnerability in ffmpeg5

The Ffmpeg v.N113007-g8d24a28d06 contains a buffer overflow vulnerability that allows a local attacker to execute arbitrary code through libavutil/imgutils.c:353:9 in the imagecopyplane function...

Astra Linux – vulnerability in lxml

Lxml is a library for processing XML and HTML in Python. Prior to version 6.1.0, using either of the two parsers with the default configuration with resolveentities=True allowed untrusted XML input to read local files. Setting the resolveentities option explicitly to resolveentities='internal' or...

Astra Linux – Vulnerability in sane-backends

A out-of-bounds read in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, also known as GHSL-2020-081...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Security. Affected versions include Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and...

CVE-2026-98398

A flaw was found in the Linux kernel's lock dependency validator lockdep. When a lock class is removed, such as during kernel module unloading, cached references in existing lock structures are not properly cleared. A local user can exploit this issue by triggering lock acquisitions that reuse...

CVE-2026-95180

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-98396

A flaw was found in the Linux kernel. On PowerPC systems, Kernel Userspace Access Prevention KUAP controls are restored prematurely before platform-specific exit routines complete during system call and interrupt handling. A local user can trigger these execution paths to cause the kernel to run...

CVE-2026-98429

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver. This flaw can result in a Denial of Service DoS due to improper synchronization between interrupt request IRQ handlers and event queue resources during device initialization and teardown. Because interrupts can be serviced...