10579 matches found
CVE-2025-0242
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary cod...
CVE-2025-0242 Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary cod...
CVE-2025-0243
CVE-2025-0243 concerns memory-safety bugs in Mozilla Firefox and Thunderbird. Affected products include Firefox 133 and Thunderbird 133, and their ESR lines (Firefox ESR 128.5, Thunderbird ESR 128.5) with exploitation potential for memory corruption that could allow executing arbitrary code. The ...
Security Vulnerabilities fixed in Thunderbird 134 — Mozilla
The Matrix specification demands homeservers to perform validation of the server-name and media-id components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent client-side path traversal...
Mozilla Firefox ESR < 128.6
The version of Firefox ESR installed on the remote Windows host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-02 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird...
Mozilla Firefox < 134.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-01 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory...
Mozilla Firefox ESR < 115.19
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-03 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...
Security Vulnerabilities fixed in Firefox ESR 115.19 — Mozilla
Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these...
Mozilla Firefox ESR < 115.19
The version of Firefox ESR installed on the remote Windows host is prior to 115.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-03 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird...
PT-2025-1008 · Mozilla +10 · Thunderbird +11
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Firefox ESR versions prior to 115.19 Thunderbird versions prior to 134 Thunderbird versions prior to 128.6 Description: The issue is related to memory safety bugs that could...
Mozilla -- Memory corruption bug
[email protected] reports: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...
Mozilla -- Memory safety bugs
[email protected] reports: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
Mozilla Firefox ESR < 128.6
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-02 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...
Mozilla Firefox < 134.0
The version of Firefox installed on the remote Windows host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-01 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption...
CVE-2024-56700
In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmcsendcmd Atomicity violation occurs when the fmcsendcmd function is executed simultaneously with the modification of the fmdev-respskb value. Consider a scenario where, after passing th...
CVE-2024-56700
CVE-2024-56700: Linux kernel wl128x media driver fix for an atomicity race in fmc_send_cmd() with fmdev->resp_skb modification, which could allow a null dereference when skb = fmdev->resp_skb is executed after the value changes. The advisory states the fix is to perform the fmdev->resp_s...
CVE-2024-56700 media: wl128x: Fix atomicity violation in fmc_send_cmd()
In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmcsendcmd Atomicity violation occurs when the fmcsendcmd function is executed simultaneously with the modification of the fmdev-respskb value. Consider a scenario where, after passing th...
CVE-2024-53176
In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount process cifskillsb calling closeallcacheddirs can race with various cached directory operations, which ultimately results in dentries not being...
CVE-2024-53176
The CVE covers a race in the Linux kernel SMB client (CIFS) during unmount: when unmounting, cached dentries may not be dropped due to racing with cached_dir operations, causing busy inodes and kernel BUGs. The fix introduces queued work in cfid_put_wq to drop dentries and flush it via close_all_...
SUSE-SU-2024:4388-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 -...