Lucene search
+L

30 matches found

NVD
NVD
added yesterday5 views

CVE-2026-16379

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

Exploits0References3
NVD
NVD
added yesterday4 views

CVE-2026-16372

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153...

Exploits0References2
EUVD
EUVD
added yesterday4 views

EUVD-2026-46215

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

5.2AI score
Exploits0References3
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-16379

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

5.2AI score
Exploits0
CVE
CVE
added yesterday6 views

CVE-2026-16379

This CVE concerns a Privilege escalation in the DOM: Content Processes component affecting Firefox and Firefox ESR. The vulnerability is noted to have been fixed in Firefox 153 and ESR 140.13. The available documents identify the affected product as Firefox/Firefox ESR and the vulnerable area as ...

5.3AI score
Exploits0References3
CVE
CVE
added yesterday5 views

CVE-2026-16372

CVE-2026-16372 describes a privilege escalation in the DOM: Content Processes component of Firefox, with a fix in Firefox 153. The available documents confirm the affected area (DOM Content Processes) and that the issue was resolved in a specific Firefox release. No exploit details or in-the-wild...

5.3AI score
Exploits0References2
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-16372

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153...

5.2AI score
Exploits0
EUVD
EUVD
added yesterday4 views

EUVD-2026-46208

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153...

5.2AI score
Exploits0References2
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.3 views

Astra Linux – Vulnerability in Firefox

The leakage of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.8AI score0.00375EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/04/01 1:15 p.m.5 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS6.2AI score0.00375EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.5 views

PT-2025-14107

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue involves the leaking of file descriptors from the fork server to web content processes, which could allow for privilege escalation attacks. Recommendations F...

9.8CVSS7.6AI score0.09348EPSS
Exploits3References146
FreeBSD
FreeBSD
added 2025/04/01 12:0 a.m.9 views

Mozilla -- privilege escalation attack

[email protected] reports: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...

7.4CVSS7.7AI score0.00375EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/01/02 9:6 a.m.4 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 9:4 a.m.5 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 8:30 a.m.6 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 8:28 a.m.3 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 8:5 a.m.5 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 7:46 a.m.5 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
Exploits0References6
Veracode
Veracode
added 2020/08/06 9:36 p.m.30 views

Sandbox Restrictions Bypass

firefox is vulnerable to sandbox restrictions bypass. The content processes did not sufficiently lockdown access control which could result in a sandbox escape...

10CVSS2.6AI score0.02714EPSS
Exploits0References4Affected Software2
NVD
NVD
added 2020/05/26 6:15 p.m.20 views

CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

10CVSS9AI score0.01728EPSS
Exploits0References3
Rows per page
Query Builder