PT-2026-81667

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to...

PT-2026-81545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Enterprise component on Windows allows an adjacent attacker to potentially execute arbitrary code outside the sandbox by using crafted network traffic. A race...

PT-2026-81633

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A use after free issue exists where a remote attacker can execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

PT-2026-81690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in TabGroups allows a remote attacker to potentially leak sensitive information through crafted network traffic. Recommendations Update Google Chrome to version...

PT-2026-81611

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to...

PT-2026-81625

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in WebRTC, which allows a remote attacker to execute arbitrary code within the sandbox by sending specially crafted network traffic. Use after free is a...

PT-2026-81706

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An issue in the Proxy functionality on Windows allows an adjacent attacker to potentially obtain sensitive information by using crafted network traffic. Recommendations Update Google...

PT-2026-81554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Loader allows a remote attacker to bypass the web origin policy through crafted network traffic. The web origin policy is a security mechanism...

The vulnerability of the H.245 analyzer in Wireshark, a traffic analysis tool for computer networks, allows a hacker to cause a service failure.

The vulnerability of the H.245 analyzer in Wireshark, a tool for analyzing computer network traffic, is related to the use of pointers. Exploiting this vulnerability can allow attackers to cause service interruptions...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

The “Use After Free” vulnerability in the Linux kernel’s traffic control index filter tcindex allows for privilege escalation. The imperfect hash area can be updated while packets are being processed, leading to a use-after-free when the ‘tcfextsexec’ function is called with a corrupted tcfext. A...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel before version 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allowed an unprivileged user to trigger a denial of service system crash through a crafted traffic control configuration set up using the "tc qdisc" and "tc class" commands. This issue affect...

Astra Linux – Vulnerability in Linux, Linux 5.10

“Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper Layer 2 Wi-Fi encryption. This may result in information disclosure over the air for a specific set of traffic.” In Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

Astra Linux – Vulnerability in Chromium

Using “after free” in QUIC in Google Chrome before version 148.0.7778.179 allowed a remote attacker to execute arbitrary code within a sandbox through malicious network traffic. Chromium security severity: High...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A flaw was discovered in the Linux kernel’s Traffic Control TC subsystem. Using a specific networking configuration—redirecting egress packets to ingress using the TC “mirred” action—a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of tab groups for after-free operations in Google Chrome before version 148.0.7778.168 allowed a remote attacker to execute arbitrary code through malicious network traffic. Chromium security severity: Critical...

Astra Linux – Vulnerability in Consul

HashiCorp Consul and Consul Enterprise 1.10.1: The TXN.Apply endpoint allows for the registration of proxies for other services, enabling access to service traffic. This feature was fixed in versions 1.8.15, 1.9.9, and 1.10.2...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Cast in Google Chrome before version 147.0.7727.138 allowed attackers on the local network segment to potentially exploit heap corruption through malicious network traffic. Chromium security severity: High...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: hns3: do not allow calling hns3nicnetopen repeatedly The function hns3nicnetopen should not be called repeatedly, but there is no checking for this. When performing device reset and setting up traffic channels concurrently,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fixed the link-down processing to address the issue of NULL pointer dereferencing. If a FC link-down transition occurs while PLOGIs are outstanding and the fabric-known addresses are involved, outstanding ABTS request...