Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, a confused deputy in DataTransfer allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

After free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Race conditions in V8 within Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Out-of-bounds writes in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in Payments within Google Chrome allowed a remote attacker to exploit social engineering techniques to potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome prior to version 151.0.7922.72, using “After Free” in the DOM allowed a remote attacker to execute arbitrary code within a sandbox by crafting a specially designed HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Skia, using “after free” in Google Chrome prior to version 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome PDF mode prior to version 152.0.7977.65, use of “After Free” allowed remote attackers to execute arbitrary code within the sandbox by using a specially crafted PDF file. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

After free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

After free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, improper reference resolution in the FileSystem allowed a remote attacker to exploit social engineering techniques to potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The lack of authorization in the FileSystem component within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and employed social engineering techniques to potentially execute arbitrary code outside the sandbox by using a specially...

Astra Linux – vulnerability in Chromium

In Blink mode within Google Chrome prior to version 151.0.7922.137, use of “after free” allowed a remote attacker to execute arbitrary code within a sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome’s Views feature, use of “after free” prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

After free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – vulnerability in Chromium

After using “free” in Animation in Google Chrome prior to version 152.0.7977.65, a remote attacker could execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: Low...