Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.96, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The vulnerability in VideoCapture in Google Chrome prior to version 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing the GPU information in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.96, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome on Linux, before version 148.0.7778.168, unauthorized access was possible when reading data from the GPU. A remote attacker who had compromised the renderer process could leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the GPU component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severit...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the GPU component of Google Chrome prior to version 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial-of-service attack through a crafted HTML page. Chromium security severity: High...

USN-8597-1: Linux kernel (IBM) vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8596-1: Linux kernel (NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8593-1: Linux kernel vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30674)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a flaw in the GPU module that allows for reuse after release. Attackers can exploit this vulnerability to bypass sandbox protections through specially crafted HTML pages...

KLA91176 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in ANGLE can be exploited...

GHSA-5X94-69RX-G8H2 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

GHSA-VJC4-5QP5-M44J vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

CVE-2026-55380 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

GHSA-FJ7V-R99M-22GQ vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

GHSA-PG7V-JWJ7-P798 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

GHSA-PHJ9-MV4W-65PM vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, superset-fips, openstack-horizon-2026.1, text-generation-inference, mlflow, openstack-horizon-2026.1-fips, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips,...