Astra Linux – Vulnerability in Chromium

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17914: Improper Protection of Physical Side Channels

Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14012: Improper Protection of Physical Side Channels

Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13889: Improper Input Validation

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11284: Improper Protection of Physical Side Channels

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11153: Improper Protection of Physical Side Channels

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3929: Improper Protection of Physical Side Channels

Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2021-0978

In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2025-13992: Improper Protection of Physical Side Channels

Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2018-11967

Malware in sbrugna...

EUVD-2022-25553

Malicious code in bioql PyPI...

EUVD-2023-25500

Malicious code in bioql PyPI...

EUVD-2023-25486

Malicious code in bioql PyPI...

EUVD-2023-25469

Malicious code in bioql PyPI...

EUVD-2023-25484

Malicious code in bioql PyPI...

EUVD-2022-25564

Malicious code in bioql PyPI...

EUVD-2023-41369

Malicious code in bioql PyPI...

EUVD-2023-25504

Malicious code in bioql PyPI...

EUVD-2023-25485

Malicious code in bioql PyPI...

CVE-2023-37482

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames...