2934656 matches found
Astra Linux – Vulnerability in Chromium
The use of after free in Navigation in Google Chrome before version 147.0.7727.138 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in memory allocation in Google Chrome before version 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.96, using free after views in Google Chrome allowed attackers to convince users to install a malicious extension, enabling them to execute arbitrary code through a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in krb5
A vulnerability in the MIT Kerberos implementation allows for GSSAPI-protected messages that use RC4-HMAC-MD5 to be spoofed, due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption methods, an attacker could exploit MD5 collisions to forge message integrity code...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox and Thunderbird
Sandbox escape due to incorrect boundary conditions in the Telemetry component of the External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
Astra Linux – Vulnerability in Chromium
The use of “after free” in WebRTC in Google Chrome before version 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption through a crafted WebRTC session. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
Another issue in networking: the DNS component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Chromium
Using use after free in Proxy in Google Chrome before version 148.0.7778.216 allowed a remote attacker to execute arbitrary code through a crafted PAC script. Chromium security severity: Critical...
Astra Linux – Vulnerability in Firefox and Thunderbird
NSSToken objects were accessed via direct pointers, and could be accessed in an unsafe manner on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...
Astra Linux – Vulnerability in libvirt
A flaw was discovered in the libvirt libxl driver. A malicious guest could continuously reboot itself, causing libvirtd on the host to become locked out or crash, resulting in a denial-of-service condition...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 97.0.4692.71, using the "After Free" feature in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, resulting in a denial of service...
Astra Linux – Vulnerability in Chromium
In Google Chrome, out-of-bounds memory access in Compositing before version 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape through specific UI gestures. Chromium security severity: High...
Astra Linux – Vulnerability in jbigkit
In LibTIFF 4.0.8, there is a memory allocation failure in the tifjbig.c file. A specially crafted TIFF document can cause an abort, leading to a remote denial-of-service attack...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Network component of Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: crypto: bcm – Fix pointer arithmetic In spu2dumpomd, the value of ptr is increased by ciphkeylen, instead of hashivlen. This could lead to exceeding the buffer boundaries. This bug has been fixed by changing ciphkeylen to...
Astra Linux – Vulnerability in Firefox and Thunderbird
Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...