Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in audio-related operations in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Integer overflow in ANGLE in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after-free in Fonts in Google Chrome on Linux before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in Core in Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome, a vulnerability in the layout rendering mechanism before version 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in isolated web apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

RHSA-2026:43401 Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.4 release and security update

Bulletin has no description...

EUVD-2026-47914

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

EUVD-2026-47915

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-64799

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1-fips, spamcheck, ansible-operator-fips, azure-functions-python-worker, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, superset, datahub-ingestion-fips, openstack-horizon-2025.2-fips, openstack-placement-2026.1-fips, py3-setuptools,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: spamcheck, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, superset, datahub-ingestion-fips, litellm, kubeflow-pipelines-fips, datadog-agent, openstack-keystone-2025.2-fips, kubeflow-pipelines-visualization-server, lmcache-cuda-12.8, mitmproxy, authentik,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: spamcheck, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, superset, datahub-ingestion-fips, litellm, kubeflow-pipelines-fips, datadog-agent, openstack-keystone-2025.2-fips, kubeflow-pipelines-visualization-server, lmcache-cuda-12.8, mitmproxy, authentik,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1-fips, spamcheck, ansible-operator-fips, azure-functions-python-worker, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, superset, datahub-ingestion-fips, openstack-horizon-2025.2-fips, openstack-placement-2026.1-fips, py3-setuptools,...