Google Chrome Microsoft Edge Information Disclosure

The vulnerability in the QUIC Quick UDP Internet Connections protocol implementation in Google Chrome and Microsoft Edge stems from errors in handling hypertext links. Exploiting this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Astra Linux – vulnerability in Chromium

Uninitialized use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Improper implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Apache2

Serving WebSocket protocol upgrades over an HTTP/2 connection may result in a Null Pointer dereference, causing a crash of the server process and degrading performance...

Astra Linux – vulnerability in Chromium

The “Use after free” functionality in Google Chrome’s Printing feature prior to version 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape by using a specially crafted HTML page. Chromium security severity: Critical...

Astra Linux – vulnerability in webkit2gtk

A use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can trigger a use-after-free condition, leading to remote code execution. The victim must visit a malicious website to exploit this vulnerability...

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.61, using "use after free" in Portals within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page...

Astra Linux – vulnerability in netty

Netty is an open-source, asynchronous event-driven network application framework designed for rapidly developing high-performance protocol servers and clients. In Netty io.netty:netty-codec-http2 prior to version 4.1.60.Final, there is a vulnerability that allows request smuggling. If a...

Astra Linux – vulnerability in libonig

Oniguruma up to version 6.9.3, as used in PHP 7.3.x and other products, contains a heap-based buffer over-read in strlowercasematch within regexec.c...

Astra Linux – vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.114, using "After Free" in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page and user gestures...

Astra Linux - vulnerability in twisted

Twisted is an event-driven framework for Internet applications. Prior to version 23.10.0rc1, when multiple HTTP requests were sent within one TCP packet, twisted.web processed them asynchronously without ensuring the correct response order. If one of the endpoints was controlled by an attacker, t...

Astra Linux – vulnerability in Chromium

Script injection in Headless mode in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Integer overflow in Mojo in Google Chrome prior to version 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page...

Astra Linux – vulnerability in php7.3

In PHP versions 7.3.x prior to 7.3.33, 7.4.x prior to 7.4.26, and 8.0.x prior to 8.0.13, certain XML parsing functions such as simplexmlloadfile URL-decode the filename passed to them. If the filename contains a URL-encoded NUL character, this may cause the function to interpret it as the end of...

Astra Linux – vulnerability in Chromium

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in w3m

There is a out-of-bounds write in the checkType field located in etc.c in w3m 0.5.3. This issue can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause a Denial of Service attack, or potentially have unspecified other impacts...

Astra Linux – vulnerability in Chromium

Improper implementation in Google Chrome Enterprise prior to version 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-87196

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-93047

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...