Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Описание Злоумышленник смог добиться выполнения кода в контентном процессе, используя уязвимость use-after-free в временных шкалах анимации. У нас есть сообщения об эксплуатации этой уязвимости в реальных условиях. Эта уязвимость затрагивает Firefox 131.0.2,...

CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — 콘텐츠 프로세스가 스스로를 RDM으로 선언할 수 있음 BrowsingContext 필드 동기화의 누락된 권한 검사에 대한 개념 증명: 손상된 콘텐츠 프로세스가 자체 최상위 BrowsingContext에 InRDMPane = true를 설정하는 PContent::CommitBrowsingContextTransaction 메시지를 위조하고, 부모 프로세스가 이를 적용 합니다. 대상: Firefox 149.0a1 nightly @ 2fbc0748c4 취약, 수정 전, macOS arm64. Firefox...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — Firefox コンテンツ→親プロセス権限昇格 Firefox 149.0a1 nightly（2fbc0748c4、修正前）におけるサンドボックスエスケープの概念実証です。侵害されたコンテンツプロセスが IPDL メッセージを偽装し、親 プロセスに特権 （privilegedabout）プロセスへページをロードさせます。 これはステージ 2 のサンドボックスエスケープであり、コンテンツプロセス RCE（例: CVE-2026-2796）の後に連鎖させることを意図しています。 バグ（Mozilla バグ 2054416） 親プロセスは、コンテンツ→親...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

Exploit for Improper Privilege Management in Mozilla Firefox

CVE-2026-74939 — Firefox content→parent privilege escalation...

Astra Linux – Vulnerability in Firefox, Thunderbird

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

Astra Linux – Vulnerability in Firefox

A compromised content process could have performed session history manipulations that it should not have been able to due to a testing infrastructure that wasn’t restricted to only testing configurations. This vulnerability affects Firefox versions less than 88...

CVE-2026-74986

Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

GHSA-V5X7-VHWF-5V44 vulnerabilities

Vulnerabilities for packages: firefox...

MiracleLinux 8 : thunderbird-102.11.0-1.el8.ML.1 (AXSA:2023-6153:18)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6153:18 advisory. Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver CVE-2023-32206 Mozilla: Potential...

EUVD-2018-16948

Malware in sbrugna...

EUVD-2019-3435

Malware in sbrugna...

EUVD-2019-7495

Malware in sbrugna...

EUVD-2019-7489

Malware in sbrugna...

EUVD-2023-57506

Malicious code in bioql PyPI...

EUVD-2022-49652

Malicious code in bioql PyPI...

EUVD-2023-57505

Malicious code in bioql PyPI...

EUVD-2025-25246

Malicious code in bioql PyPI...

EUVD-2024-16537

Malicious code in bioql PyPI...

CVE-2025-9179

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...