Reproduce-CVE-2023-52927

Reproduire-CVE-2023-52927 Cible Machine kCTF cos-109-17800.436.33 : Image du noyau bzImage : https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage Image du noyau vmlinux : https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz...

CVE-2021-22555

CVE-2021-22555 В этом репозитории размещён эксплойт TUKRU для повышения привилегий в Linux CVE-2021-22555. Он демонстрирует получение root-привилегий через уязвимость. Протестировано на Ubuntu 5.8.0-48-generic и COS 5.4.89+. Используйте ответственно и этично. CVE-2021-22555: эксплойт для повышени...

Astra Linux – Vulnerability in Chromium

In the Network Config UI of the Google Chrome browser on ChromeOS, incorrect security user interfaces prior to version 90.0.4430.72 allowed a remote attacker to potentially compromise Wi-Fi connection security through a malicious wireless adapter...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosectypec: Stale pointers have been set to zero. The function crostypecgetswitchhandles allocates four pointers when obtaining type-c switch handles. These pointers are all freed if none of them are obtained...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

CLEANSTART-2024-EO25868 Use after free in File Manager in Google Chrome on Chrome OS prior to 98

Security vulnerability affects the chromium package. Use after free in File Manager in Google Chrome on Chrome OS prior to 98...

CLEANSTART-2024-ZE33362 Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101

Security vulnerability affects the chromium package. Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101...

CLEANSTART-2024-GQ88613 Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101

Security vulnerability affects the chromium package. Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101...

CLEANSTART-2024-LM37049 Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101

Security vulnerability affects the chromium package. Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101...

CLEANSTART-2024-HP60210 Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102

Security vulnerability affects the chromium package. Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102...

CLEANSTART-2024-AV38826 Use after free in Sharing in Google Chrome on Chrome OS prior to 102

Security vulnerability affects the chromium package. Use after free in Sharing in Google Chrome on Chrome OS prior to 102...

CLEANSTART-2024-TT19633 Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103

Security vulnerability affects the chromium package. Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103...

ROS-20260929-73-0142

The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Chromium

Before version 105.0.5195.52, using PhoneHub in Google Chrome on Chrome OS allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecchardev: fix kernel data leak from ioctl It is possible to view the data of kernel pages by providing a larger insize value in struct croseccommand1 when invoking EC host commands. This issue was fixed by...

Astra Linux – Vulnerability in Chromium

The vulnerability in Google Chrome videos on ChromeOS before version 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Uninitialized use in codecs in Google Chrome on Linux and ChromeOS prior to version 149.0.7827.103 allowed a remote attacker to leak cross-origin data through a crafted video file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Out-of-bounds memory access occurred in the UI interface of Lacros in Google Chrome on the Chrome OS. Prior to version 101.0.4951.41, this vulnerability allowed a remote attacker to potentially exploit heap corruption through specific user interactions...