CVE-2025-10535

CVE-2025-10535 describes an information-disclosure and mitigation-bypass vulnerability in the Privacy component of Firefox for Android, affecting Firefox versions older than 143. The issue is cited across multiple security feeds and Nessus plugins as part of the Firefox

CVE-2025-10530 Spoofing issue in the WebAuthn component in Firefox for Android

Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143...

CVE-2025-10536 Information disclosure in the Networking: Cache component

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10536

Mode C: CVE-2025-10536 is an Information disclosure in the Networking: Cache component affecting Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird

CVE-2025-10532

CVE-2025-10532 involves incorrect boundary conditions in the JavaScript: GC component affecting Firefox and Thunderbird products. Affected versions: Firefox and Thunderbird before 143, and ESR before 140.3. Connected advisories indicate fixes released as Firefox/Thunderbird updates (e.g., Firefox...

CVE-2025-10532 Incorrect boundary conditions in the JavaScript: GC component

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10527 Sandbox escape due to use-after-free in the Graphics: Canvas2D component

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10528

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10533

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10533 Integer overflow in the SVG component

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10533

CVE-2025-10533 describes an integer overflow in the SVG component affecting Firefox before 143, Firefox ESR before 115.28 and 140.3, Thunderbird before 143 and 140.3. Connected sources confirm the same vulnerability details. The Astra Linux security bulletin echoes this issue and lists the affect...

PT-2025-37936

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Description The software is susceptible to an unspecified issue. Recommendations Update to Firefox version 143 or later...

PT-2025-37934

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 115.28 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firef...

PT-2025-37929

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...

PT-2025-37933

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...