Astra Linux – Vulnerability in Chromium

Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to leak sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to obtain sensitive information through a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the USB setting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass web origin policy through a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

In the UI representation of Google Chrome before version 152.0.7977.65, it was possible for a remote attacker to leverage social engineering techniques to bypass system access restrictions through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass web origin policy through crafted network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Information leaks in Extensions in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to leverage social engineering to obtain cross-origin data through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Information leaks in Extensions in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to obtain cross-origin data through a crafted Chrome Extension. Chromium security severity: Medium...

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a...

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...

How device code phishing gives scammers access to your account

You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts. The message claims the code will let you open the document or join the meeting. In fact, it approv...

CVE-2026-71460

The Red Hat Ansible Automation Platform (specifically the automation-controller component) is vulnerable to unrestricted subscription and license information disclosure. The /api/v2/config/ endpoint is insufficiently protected by only requiring IsAuthenticated status. Consequently, any authentica...

SUSE CVE-2026-95289

Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-95294

UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-95296

Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-95300

Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...