Astra Linux – Vulnerability in Chromium

Using “after free” in Chromoting in Google Chrome before version 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox through crafted network traffic. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

A observable discrepancy in the layout of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Clear newtransport when removing a peer. sctpprocessasconfparam stores the newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer t...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Information leaks in Frames in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Incomplete cleanup in the Browser of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policy through a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Network section of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policy through a crafted Chrome extension. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Improper privilege management in the FileSystem of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering techniques to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the Presentation component of Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Select feature of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

In versions of Google Chrome before 153.0.8010.36, improper representation of user interface elements allowed a remote attacker to exploit social engineering techniques to manipulate UI elements through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Network setting of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In the version of Editing in Google Chrome prior to 152.0.7977.65, race conditions allowed a remote attacker to exploit social engineering techniques to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...