Lucene search
+L

4 matches found

NVD
NVD
•added 2025/04/18 4:15 p.m.•48 views

CVE-2025-32792

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

8.7CVSS0.00587EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/18 4:04 p.m.•101 views

CVE-2025-32792 ses's global contour bindings leak into Compartment lexical scope

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

8.7CVSS0.00587EPSS
SaveExploits0References1
Mend
Mend
•added 2025/04/18 4:04 p.m.•13 views

CVE-2025-32792

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using "ses" and the Compartment API to evaluate third-party code in an isolated execution environment that...

8.7CVSS5.9AI score0.00587EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/18 12:00 a.m.•10 views

CVE-2025-32792: Exposure of Sensitive System Information to an Unauthorized Control Sphere

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

8.7CVSS6AI score0.00587EPSS
SaveExploits0References1
Rows per page
Query Builder