Astra Linux - vulnerability in linux

An issue was discovered in the Linux kernel up to version 5.11.3, which is used with Xen PV. A certain part of the netback driver fails to properly handle errors such as failed memory allocations—this is due to changes made to how grant mapping errors are handled. A denial-of-service condition on...

Microsoft MANA Network Driver Kernel Privilege Escalation

The vulnerability of the Microsoft MANA Network Driver for Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

Passwords Component Access Information Disclosure

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Protected Information Access

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Preload Component Protected Information Access

The Preload component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome HTTP/2 Vulnerable Access Protected Information

The HTTP/2 component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information...

ROS-20261014-73-0117

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability in the Sensor component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Viz component vulnerability Google Chrome Microsoft Edge

The Viz component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

ROS-20261014-73-0008

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Google Chrome Microsoft Edge Protected Information Access

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Preload Component Protected Information Access

The Preload component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Passwords Component Access Information Disclosure

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Omnibox address strings of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

EUVD-2026-99009

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...

CVE-2026-110224 QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...

CVE-2026-110224

QloApps versions through 1.7.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the AdminSearchConfController::processSave() function. The root cause is that the application echoes rejected alias and search values without proper escaping during validation errors. An a...

CVE-2026-110224 QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...

CVE-2026-110224 QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...