Astra Linux – Vulnerability in Chromium

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The race condition in the browser of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Information leaks in Canvas in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after free in Compositing in Google Chrome before version 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Loader component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Network component of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A buffer overflow in V8 in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Network component of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in FedCM in Google Chrome before version 152.0.7977.65 allowed a remote attacker to leverage social engineering to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In versions of V8 in Google Chrome prior to 150.0.7871.125, uninitialized usage allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, using V8 in Google Chrome allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in Views in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The out-of-bounds reading in ANGLE in Google Chrome before 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in browsers with Google Chrome before version 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Improper input validation in Chromecast within Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to obtain sensitive information through a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Race conditions in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and utilized social engineering to bypass site isolation through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in Aura in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in the cache of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Information leaks in Core in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak cross-origin data through a crafted Chrome extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof the address bar via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after free in Compositing in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: The array skb2-cb was cleared in ip6ip6err. ip6ip6err clones an outer IPv6 ICMP error packet, moves it into the quoted inner IPv6 packet, and then passes the cloned packet to icmpv6send. The cloned packet still carries...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Using “after free” in Blink in Google Chrome before version 151.0.7922.137 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using “after free” in the Network component of Google Chrome before version 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Platform in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in Payments in Google Chrome before version 153.0.8010.36 allowed a remote attacker to leverage social engineering to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

An observable discrepancy in the Network component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Stop the “fast-leave” operation after deleting a port group. The br Multicast Leave Group function iterates over mp-ports with pp = &p-next in its “fast-leave” path. After br Multicast DelPg removes p, the loop...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Network of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebRTC in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...