Lucene search
K

194 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в firefox, thunderbird

Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

9.8CVSS5.8AI score0.0009EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в firefox, thunderbird

Memory safety bugs exist in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...

8.8CVSS6.1AI score0.00061EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в firefox

A memory safety bug exists in Firefox 143 and Thunderbird 143. This bug exhibited signs of memory corruption, and we assume that with sufficient effort, this could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 144 and Thunderbird 144...

9.8CVSS6AI score0.00066EPSS
Exploits0References2
OSV
OSV
added 2026/03/06 10:13 a.m.8 views

RHSA-2026:3873 Red Hat Security Advisory: kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, kpatch-patch-5_14_0-70_144_1, and kpatch-patch-5_14_0-70_155_1 security update

Bulletin has no description...

7CVSS5.7AI score0.00088EPSS
Exploits0References8
Circl
Circl
added 2026/03/03 5:0 a.m.2 views

CVE-2025-71205

creationtimestamp| type| source ---|---|--- 2026-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-144/...

5.9AI score
Exploits0References1
OSV
OSV
added 2026/02/06 10:8 a.m.8 views

RHSA-2026:2127 Red Hat Security Advisory: kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, kpatch-patch-5_14_0-70_144_1, and kpatch-patch-5_14_0-70_155_1 security update

Bulletin has no description...

7CVSS4.9AI score0.00058EPSS
Exploits0References8
Circl
Circl
added 2026/02/05 2:48 a.m.3 views

CVE-2026-1642

creationtimestamp| type| source ---|---|--- 2026-02-05 02:48:12+00:00| seen| https://seclists.org/oss-sec/2026/q1/144 2026-02-05 14:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q 2026-02-06 01:50:05+00:00| seen|...

8.2CVSS7.4AI score0.0002EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2026/02/02 12:0 a.m.2 views

Fedora: Security Advisory (FEDORA-2026-c5295ae3b9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.5AI score0.00164EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/01/20 4:14 a.m.4 views

CVE-2026-0902

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.3AI score0.0015EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

Google Chrome < 144.0.7559.96 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 144.0.7559.96. It is, therefore, affected by a vulnerability as referenced in the 202601stable-channel-update-for-desktop20 advisory. - Race in V8. CVE-2026-1220 Note that Nessus has not tested for this issue but has...

5.8AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.0 views

Google Chrome < 144.0.7559.96 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 144.0.7559.96. It is, therefore, affected by a vulnerability as referenced in the 202601stable-channel-update-for-desktop20 advisory. - Race in V8. CVE-2026-1220 Note that Nessus has not tested for this issue but has...

5.8AI score
Exploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2026/01/13 12:0 a.m.18 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 144 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 144.0.7559.59 Linux 144.0.7559.59/60 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

9.8CVSS7AI score0.00164EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/12/18 3:15 p.m.2 views

CVE-2025-14744

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS 144.0...

6.5CVSS5.8AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2025/12/18 3:15 p.m.2 views

CVE-2025-14744

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

6.5CVSS5.8AI score0.00026EPSS
Exploits0References3
CVE
CVE
added 2025/12/18 2:21 p.m.12 views

CVE-2025-14744

CVE-2025-14744 concerns Unicode RTLO spoofing in Firefox for iOS prior to version 144.0. The issue allows a malicious website to render spoofed filenames in the downloads UI, potentially misleading users into saving files with an unintended file type. Affected product: Firefox for iOS

6.5CVSS5.8AI score0.00026EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 2:21 p.m.1 views

CVE-2025-14744 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

5.8AI score0.00026EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/11/13 12:43 a.m.1 views

SUSE CVE-2025-13027

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

7.5CVSS7.4AI score0.00052EPSS
Exploits0References3
Mozilla
Mozilla
added 2025/11/13 12:0 a.m.6 views

Security Vulnerabilities fixed in Thunderbird 145 — Mozilla

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...

9.8CVSS7.7AI score0.00061EPSS
Exploits0References15Affected Software1
RedHat Linux
RedHat Linux
added 2025/11/12 2:35 a.m.3 views

thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume th...

8.8CVSS7.4AI score0.00064EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/11/12 2:35 a.m.4 views

thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...

6.1CVSS6.2AI score0.00043EPSS
Exploits0References6
Rows per page
Query Builder