Astra Linux – Vulnerability in Chromium

The use of after-free in Views in Google Chrome before version 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox through UI interactions. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in Views in Google Chrome before version 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox through a local program. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and pskbcarveinsidenonlinear both copy the old skbsharedinfo header into a new buffer via memcpy, which includes the destructorarg pointer uar...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Core in Google Chrome on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.52, out-of-bounds reads in DataTransfer allowed a local attacker to exploit social engineering techniques to read memory outside the sandbox using a local program. Chromium security severity: Medium...

Astra Linux – Vulnerability in Git

Git is an open-source, scalable, distributed version control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are vulnerable to exposure of sensitive information by malicious actors. When performing a local clone where the source and target of the clone...

Astra Linux – Vulnerability in binutils

A flaw has been discovered in GNU Binutils 2.45. The affected function is bfdelfparseehframe in the file bfd/elf-eh-frame.c of the Linker component. Executing certain manipulations can lead to a heap-based buffer overflow. This attack is limited to local executions. The exploit has been published...

Astra Linux – vulnerability in Chromium

An improper implementation in Chromoting within Google Chrome on Linux prior to version 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in PackageKit

PackageKit’s apt backend mistakenly treats all local deb files as trustworthy. The apt security model is based on repository trust, not the contents of individual files. On sites where PolicyKit rules are configured, this could allow users to install malicious packages...

Astra Linux – Vulnerability in Linux

A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...

Astra Linux – vulnerability in linux, linux-5.10

In various setup methods of the USB gadget subsystem, there is a possible out-of-bounds write due to an incorrect flag check. This could lead to local privilege escalation without requiring any additional execution privileges. No user interaction is needed for exploitation. Product: Android;...

Astra Linux - vulnerability in linux

A flaw was found in the Linux kernel. A use-after-free occurred in how the console subsystem utilized ioctls KDGKBSENT and KDSKBSENT. A local user could exploit this flaw to gain read memory access beyond the allocated bounds. The primary threat posed by this vulnerability is data confidentiality...

Astra Linux – Vulnerability in unbound

Unbound from NLnet Labs, including versions up to and including 1.12.0, and NSD from NLnet Labs, including versions up to and including 4.3.3, contain a local vulnerability that allows for a local symlink attack. When creating the PID file, Unbound and NSD either create the file if it does not...

Astra Linux – Vulnerability in Intel Microcode

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable privilege escalation through local access...

CVE-2026-98398

A flaw was found in the Linux kernel's lock dependency validator lockdep. When a lock class is removed, such as during kernel module unloading, cached references in existing lock structures are not properly cleared. A local user can exploit this issue by triggering lock acquisitions that reuse...

CVE-2026-95180

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-98396

A flaw was found in the Linux kernel. On PowerPC systems, Kernel Userspace Access Prevention KUAP controls are restored prematurely before platform-specific exit routines complete during system call and interrupt handling. A local user can trigger these execution paths to cause the kernel to run...

CVE-2026-98429

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver. This flaw can result in a Denial of Service DoS due to improper synchronization between interrupt request IRQ handlers and event queue resources during device initialization and teardown. Because interrupts can be serviced...