Astra Linux – Vulnerability in Chromium

The use of “after free” in Portals in Google Chrome before version 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption through user interactions...

Astra Linux – Vulnerability in Linux

In memzeroexplicit of compiler-clang.h, there is a possible way to bypass defense in depth due to uninitialized data. This could lead to the disclosure of local information without requiring additional execution privileges. User interaction is not required for exploitation. Product: Android...

Astra Linux – Vulnerability in gdisk

In the LoadPartitionTable function of gpt.cc, there is a potential out-of-bounds write vulnerability due to a missing bounds check. This could lead to a local escalation of privileges when inserting a malicious USB device, without the need for additional execution privileges. User interaction is...

Astra Linux – Vulnerability in Chromium

The use of “after free” in User Education in Google Chrome before version 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted Chrome Extension or specific user interactions...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Bookmarks in Google Chrome before version 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted Chrome Extension and specific user interactions...

Astra Linux – Vulnerability in Chromium

Before version 102.0.5005.61, using the "after free" feature in the Performance Manager in Google Chrome allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page, as long as that attacker could convince a user to perform certain user interactions...

Astra Linux – Vulnerability in Chromium

The use of tab groups for temporary files in Google Chrome before version 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted Chrome Extension and specific user interactions...

Astra Linux – Vulnerability in Chromium

Before version 104.0.5112.101, using free in Browser Creation in Google Chrome allowed a remote attacker who had convinced a user to perform a specific UI interaction to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

In Networking APIs of Google Chrome, before version 112.0.5615.49, it was possible for a remote attacker to exploit heap corruption by using a crafted HTML page, as long as that attacker could convince a user to perform certain UI interactions. Chromium security severity: Medium...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability that may lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a specially crafted file...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. The supported versions affected by this vulnerability are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. This vulnerability is difficult to exploit...

Astra Linux – Vulnerability in FLAC

In FLACbitreaderreadricesignedblock of bitreader.c, there is a potential out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is required for exploitation. Product: Android. Versions:...

Important: gstreamer1-plugins-base

Issue Overview: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-76922

A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users. Mitigation To mitigate this issue, users should avoi...

CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

CVE-2026-80469 CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

CVE-2026-80469

CVE-2026-80469 affects the Device Manager extension shipped with SICK Sentio Creator , in releases up to and including version 2026.2 . An attacker can achieve arbitrary code execution on a target system by uploading a malicious device driver package that bypasses driver verification mechanisms, ...

CVE-2026-80469 CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

EUVD-2026-76022

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

Fedora 43 : rest (2026-c2116e108f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2116e108f advisory. Fix for https://access.redhat.com/security/cve/cve-2026-16615 Tenable has extracted the preceding description block directly from the Fedora security advisor...