Astra Linux – Vulnerability in Chromium

The inappropriate implementation of passwords in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The privilege escalation in Import in Google Chrome prior to version 151.0.7922.173 allowed a remote attacker to leverage social engineering to potentially execute arbitrary code outside of the sandbox, through a crafted file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In versions of Google Chrome prior to 152.0.7977.65, improper representation of UI elements allowed a remote attacker to exploit social engineering techniques to spoof UI elements through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

A “off-by-one” error in DevTools in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox through a crafted Chrome extension, using social engineering techniques. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in the PermissionElement component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to leverage social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to leak sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in the “Passwords” component in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information through crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Updater component of Google Chrome before version 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation through a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after free in Compositing in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In version 152.0.7977.65, an uninitialized resource in the Video tab of Google Chrome allowed a remote attacker to read memory within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and utilized social engineering to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity:...

Astra Linux – Vulnerability in Chromium

Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...