Astra Linux – vulnerability in Chromium

Privilege escalation in the WebUI of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

A buffer overflow in Blink within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

After free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome on Aura, use after free prior to version 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

After using “free” in Google Chrome’s Autofill feature prior to version 151.0.7922.72, a remote attacker could execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In FedCM on Google Chrome, use after free prior to version 152.0.7977.65 allows a remote attacker to exploit social engineering to execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in the Chromecast within Google Chrome allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in the “Cast” feature in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox by sending specially crafted network traffic. Chromium security severity: Critical...

Astra Linux – vulnerability in Chromium

Improper implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In DevTools for Google Chrome prior to version 152.0.7977.82, use of “After Free” allowed remote attackers to execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, after free usage in V8, a remote attacker could exploit social engineering techniques to execute arbitrary code within the sandbox by using a specially crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The lack of authorization checks in Extensions in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via specially crafted network traffic. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in the Receiver extension within Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox by sending specially crafted network traffic. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome’s V8 engine, use-after-free vulnerabilities were permitted prior to version 151.0.7922.72; this allowed attackers to convince users to install a malicious extension, enabling them to execute arbitrary code within a sandbox by using a specially crafted Chrome extension. Chromium...

Astra Linux – vulnerability in Chromium

In Google Chrome’s Views feature, use of “after free” prior to version 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in Input within Google Chrome allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome Extensions prior to version 153.0.8010.36, incorrect reference resolution allowed a remote attacker to potentially execute arbitrary code outside the sandbox via specially crafted network traffic. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 152.0.7977.75, an uninitialized resource in V8 allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 150.0.7871.128, out-of-bounds read and write operations in V8 allowed a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-97185

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...