501 matches found
Astra Linux – vulnerability in Firefox
Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 89...
Astra Linux – Vulnerability in Firefox
By using XSL Transforms, a malicious webserver could serve a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed. This vulnerability affects Firefox versions earlier than 97...
Astra Linux – vulnerability in Firefox
Under unusual circumstances, a single thread may survive beyond the end of its manager’s lifetime during shutdown. This could result in a use-after-free condition that may lead to a crash exploitable by attackers. This vulnerability affects Firefox versions prior to 98...
Astra Linux – Vulnerability in Firefox and Thunderbird
If an attacker could control the contents of an iframe that was sandboxed using allow-popups but not allow-scripts, they could create a link that, when clicked, would cause JavaScript execution, violating the sandboxing rules. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbi...
Astra Linux – Vulnerability in Chromium
Before version 90.0.4430.72, using extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape through a crafted Chrome Extension...
Astra Linux – Vulnerability in Firefox
A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...
Astra Linux – Vulnerability in Firefox
When parsing internationalized domain names, the high bits of the characters in the URLs were sometimes removed, resulting in inconsistencies that could cause confusion for users or lead to attacks like phishing. This vulnerability affects Firefox versions earlier than 94...
Astra Linux – Vulnerability in Firefox
The SVG element could have been used to load unexpected content that might execute scripts under certain circumstances. Although the specification appears to allow this, other browsers do not do so. Web developers relied on this property for script security, so Gecko’s implementation was aligned...
Astra Linux – vulnerability in Firefox and Thunderbird
By using reportValidity and window.open, a plain-text validation message could have been displayed on another origin, potentially causing user confusion and enabling spoofing attacks. This vulnerability affects Firefox 93, Thunderbird 91.2, and Firefox ESR 91.2...
Astra Linux – vulnerability in Firefox
Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 90...
Astra Linux – vulnerability in Chromium
Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...
ROOT-OS-UBUNTU-2404-CVE-2025-38190 CVE-2025-38190 in linux - Patched by Root
Root has patched CVE-2025-38190 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43495 CVE-2026-43495 in linux - Patched by Root
Root has patched CVE-2026-43495 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
Astra Linux – Vulnerability in Firefox
Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 98. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to...
Astra Linux – Vulnerability in Firefox
Mixed-content checks were unable to analyze opaque origins, resulting in some mixed content being loaded. This vulnerability affects Firefox versions earlier than 92...
Astra Linux – Vulnerability in Thunderbird
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs in Firefox 94. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these...
Astra Linux – Vulnerability in Firefox
Mozilla developers and community members reported memory safety bugs in Firefox 90. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versions of...
Astra Linux – Vulnerability in Firefox and Thunderbird
Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption, and we assume that with...
Astra Linux – Vulnerability in Firefox
Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs in Firefox 97. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This...