Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 描述 攻击者通过利用动画时间线（Animation timelines）中的释放后使用（use-after-free）漏洞，能够在内容进程中实现代码执行。我们已收到关于此漏洞在野被利用的报告。此漏洞影响 Firefox include int main int ptr = int mallocsizeofint; // Allocate memory ptr = 42; // Use the allocated memory freeptr; // Free the memory // Use the pointer...

CVE-2026-4692-trust-me-im-in-rdm

CVE-2026-4692 — los procesos de contenido pueden declararse en RDM Prueba de concepto de una verificación de autorización faltante en la sincronización del campo BrowsingContext: un proceso de contenido comprometido falsifica un mensaje PContent::CommitBrowsingContextTransaction estableciendo...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — escalada de privilegios content→parent en Firefox Prueba de concepto para una evasión del sandbox en Firefox 149.0a1 nightly 2fbc0748c4, anterior al parche. Un proceso de contenido comprometido falsifica un mensaje IPDL que hace que el parent cargue una página en un proceso...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

Exploit for Improper Privilege Management in Mozilla Firefox

CVE-2026-74939 — Firefox content→parent privilege escalation...

Astra Linux – Vulnerability in Firefox, Thunderbird

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

CVE-2026-74986

Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

GHSA-V5X7-VHWF-5V44 vulnerabilities

Vulnerabilities for packages: firefox...

Astra Linux – Vulnerability in Firefox

A compromised content process could have performed session history manipulations that it should not have been able to due to a testing infrastructure that wasn’t restricted to only testing configurations. This vulnerability affects Firefox versions less than 88...

MiracleLinux 8 : thunderbird-102.11.0-1.el8.ML.1 (AXSA:2023-6153:18)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6153:18 advisory. Mozilla: Browser prompts could have been obscured by popups CVE-2023-32205 Mozilla: Crash in RLBox Expat driver CVE-2023-32206 Mozilla: Potential...

EUVD-2018-16948

Malware in sbrugna...

EUVD-2019-3435

Malware in sbrugna...

EUVD-2019-7495

Malware in sbrugna...

EUVD-2019-7489

Malware in sbrugna...

EUVD-2023-57506

Malicious code in bioql PyPI...

EUVD-2023-57505

Malicious code in bioql PyPI...

EUVD-2022-49652

Malicious code in bioql PyPI...

EUVD-2024-16537

Malicious code in bioql PyPI...

EUVD-2025-25246

Malicious code in bioql PyPI...

CVE-2025-9179

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...