Astra Linux – Vulnerability in Chromium

In the Browser UI of Google Chrome, out-of-bounds memory access before version 125.0.6422.141 allowed a remote attacker to exploit heap corruption through a crafted HTML page, by convincing a user to perform certain UI gestures. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Prompts in Google Chrome prior to version 124.0.6367.60 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to version 124.0.6367.60 allowed a remote attacker to perform UI spoofing through a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The incorrect security UI in Payments in Google Chrome prior to version 121.0.6167.85 allowed a remote attacker to potentially spoof the security UI through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof the browser UI through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-45057

A flaw was found in matrix-sdk-ui. The component's message edit validation logic does not properly enforce encryption for replacement events, even when the original message was encrypted. This vulnerability allows a malicious homeserver administrator, or an attacker with similar capabilities, to...

ROS-20260914-73-0121

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-91730

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 Description A client-side authorization bypass allows a remote authenticated attacker to view administrative user interface components. Recommendations At the moment, there is no...

CVE-2026-78415: Improper Neutralization of Input During Web Page Generation

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...

ROS-20260914-73-0051

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

PT-2026-91731

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...

Malicious code in integromat-ui (npm)

Source: amazon-inspector 7de4e86762c4fcb7682615925818028501cfb55cdd9fdeaf238f2e186b1f121e The package integromat-ui was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-45057

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

EUVD-2026-76764

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-45057 matrix-sdk-ui: Incomplete edit validation

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-45057 matrix-sdk-ui: Incomplete edit validation

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-45057

CVE-2026-45057 affects the matrix-sdk-ui Rust crate (part of matrix-rust-sdk) prior to version 0.16.1 . The message edit validation logic is missing a check: when replacing an encrypted event, the replacement event is not required to be encrypted itself. This allows a malicious homeserver adminis...

CVE-2026-45057 matrix-sdk-ui: Incomplete edit validation

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...