287 matches found
CLSA-2025-1747430081 Fix of 47 CVEs
CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...
Astra Linux – vulnerability in Chromium
The “use after free” functionality in Google Chrome’s ServiceWorker was permitted prior to version 149.0.7827.103; this allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape by using a specially crafted Chrome Extension. Chromium securit...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Nilfs2: Added a missing check for inode numbers in directory entries. Syzbot reported that mounting and unmounting a specific pattern of corrupted Nilfs2 filesystem images causes a use-after-free of metadata file inodes, which...
Astra Linux – vulnerability in Chromium
Prior to version 87.0.4280.88, using “After Free” in the clipboard within Google Chrome allowed a remote attacker to potentially exploit heap corruption by sending a specially crafted HTML page...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebRTC in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a race condition in the serial channel IRP thread tracking allowed a use-after-free heap operation when one thread removed an entry from serial-IrpThreads while another read it. This vulnerability has been...
PT-2026-94657
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/erdma component where EQ handlers look up CQs from dev-cq xa and invoke completion or error callbacks outside the xarray lock. This allows erdma destroy cq to...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: Binder: Fixed a UAF Use-After-Free issue caused by a race condition involving ref-proc. A transaction of type BINDERTYPEWEAKHANDLE may fail to increment the reference count of a node. In this case, the target proc normally releas...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebGL in Google Chrome before version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a UAF in jfsevict inode. When the execution of diMountipimap fails, the object ipimap that has been released may be accessed in diFreeSpecial. Asynchronous release of ipimap occurs when rcucore calls jfsfreenode...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
A use-after-free flaw was discovered in the ext4remount function in the fs/ext4/super.c file within ext4 in the Linux kernel. This flaw allows a local user to cause an information leak issue when freeing the old quota file names before a potential failure, resulting in a use-after-free condition...
PT-2026-96410
In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc get and of icc get by index In of icc get by index and icc get, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the pat...
CVE-2026-81008: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in iccget and oficcgetbyindex In oficcgetbyindex and iccget, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the path object a...
CVE-2026-19145
A use after free vulnerability exists in the Translate component of Google Chrome (prior to version 151.0.7922.109 ). A remote attacker can exploit this flaw by visiting a crafted HTML page to achieve arbitrary code execution within a sandbox. This issue also affects Microsoft Edge (Chromium-base...
Chromium: CVE-2026-17661 Use after free in Loader
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-17708
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17891
Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-17746
Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17704
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
PT-2026-66130
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows. This flaw allows a remote attacker to...