CVE-2026-4637

Paessler PRTG Network Monitor (versions before 26.2.120.1449 ) is vulnerable to a reflected Cross-Site Scripting (XSS) flaw. The issue occurs because the web interface returns an HTTP 403 "Forbidden Path" error page for non-existent resources ending in ".htm" and echoes the requested URL path int...

EUVD-2026-85840

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting XSS vulnerability. When a request is made for a non-existent resource ending in ".htm", the web interface returns an HTTP 403 "Forbidden Path" error page that echoes the requested URL path...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Network of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

An observable discrepancy in Select in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 151.0.7922.72, read and write access in ANGLE using Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in the Network component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In the UI representation of Google Chrome before version 152.0.7977.65, it was possible for a remote attacker to leverage social engineering techniques to bypass system access restrictions through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass web origin policy through crafted network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

In Google Chrome, before version 153.0.8010.36, uninitialized resources in Codecs allowed a remote attacker to read memory within the sandbox through a crafted HTML page. Chromium security severity: Medium...