Astra Linux – Vulnerability in Chromium

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: A NULL check should be added for the idev pointer in ipv6hopioam. Reported by Sashiko: The function ipv6hopioam accesses in6devgetskb-dev-cnf.ioam6enabled without validating the returned idev pointer. Since...

Astra Linux – Vulnerability in Chromium

Integer overflow in the GPU in Google Chrome prior to version 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to obtain sensitive information through UI interaction. Chromium security severity: Medium...

Astra Linux – Vulnerability in Golang 1.19, Golang 1.23

If the PATH environment variable contains paths that are executable files rather than just directories, passing certain strings to LookPath "", ".", and ".." may cause the binaries listed in the PATH to be returned unexpectedly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Serialize the kernel’s accept operation with socket teardown. The rxrpckernelchargeaccept function reads rx-backlog without any socket/backlog synchronization, and passes this raw pointer to rxrpcservicepreallocone. A...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: Rejects monmaps that advertise zero monitors. A message of type CEPHMSGMONMAP contains a monmap sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently, a...

Astra Linux – Vulnerability in Chromium

Improper input validation in the Network component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Unlink the TWT flow if the MCU rejects the agreement. The flow is added to dev-twtlist before sending the agreement to the firmware. However, the error path leaves the flow linked, even though flowidmask is...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of Google Lens in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Information leaks in Paint within Google Chrome before version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In versions of Extensions in Google Chrome prior to 152.0.7977.65, race conditions allowed a remote attacker to bypass system access restrictions through a specially crafted Chrome extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 152.0.7977.65, an uninitialized resource in the GPU allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Select feature of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy through a crafted HTML page. Chromium security severity: Low...