Astra Linux – Vulnerability in Chromium

The use of “after free” in Compositing in Google Chrome before version 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux - vulnerability in Thunderbird

In resizeToAtLeast within SkRegion.cpp, there is a potential out-of-bounds write due to an integer overflow. This could result in local privilege escalation without requiring any additional execution privileges. No user interaction is necessary for exploitation...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 87.0.4280.88, uninitialized use of V8 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in tab groups in Google Chrome prior to version 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in TabStrip in Google Chrome prior to version 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using Blink with Google Chrome on OS X allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page...

Astra Linux – vulnerability in Chromium

After using “free” in the Sign-In feature of Google Chrome prior to version 95.0.4638.69, a remote attacker could have exploited heap corruption by sending a specially crafted HTML page to convince a user to log into Chrome...

Astra Linux – vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory based on user-specified values; these values determine the number of elements in the multi-bulk header and the size of each element in the...

Astra Linux – vulnerability in sox

A heap-based buffer overflow vulnerability exists in the startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Astra Linux – Vulnerability in Zeromq3

There is a flaw in the zeromq server in versions before 4.3.3, located in src/decoderallocators.hpp. The decoder’s static allocator could have its size changed, but the buffer remains unchanged since it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zero...

Astra Linux – Vulnerability in Chromium

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

The “Use after free” vulnerability in Google Chrome’s Serial component prior to version 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

An improper implementation in Google Lens within Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions by using a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Apache2

When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...

Astra Linux – Vulnerability in Chromium

A single error in V8 in Google Chrome prior to version 141.0.7390.54 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in binutils

A vulnerability has been identified in GNU Binutils 2.45. The affected component is the elfx8664relocatesection function within the elf64-x86-64.c file of the Linker component. This manipulation leads to a heap-based buffer overflow. The attack can only be carried out locally. The exploit has bee...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...