Lucene search
+L

973 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.12 views

PT-2025-46360

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Description A use-after-free issue exists in the WebRTC Audio/Video component. This can potentially allow for unexpected behavior or crashes. Recommendations Update Firefox to...

9.1CVSS6.8AI score0.00659EPSS
SaveExploits0References466
Tenable Nessus
Tenable Nessus
added 2025/11/11 12:00 a.m.4 views

Mozilla Firefox ESR < 140.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145 and Firefox...

8.8CVSS6.1AI score0.00443EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/11/11 12:00 a.m.1 views

Mozilla Firefox ESR < 140.5

The version of Firefox ESR installed on the remote Windows host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145 and Firefox ESR 140.5...

8.8CVSS6.1AI score0.00443EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2025/11/10 1:56 a.m.11 views

thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume th...

8.8CVSS7.4AI score0.00306EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/11/10 1:18 a.m.9 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

9.8CVSS6.8AI score0.00475EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2025/10/23 12:00 a.m.6 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.00313EPSS
SaveExploits0References18Affected Software6
Tenable Nessus
Tenable Nessus
added 2025/10/18 12:00 a.m.5 views

RockyLinux 10 : firefox (RLSA-2025:18154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18154 advisory. thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL...

9.8CVSS7.2AI score0.00475EPSS
SaveExploits0References15
RedHat Linux
RedHat Linux
added 2025/10/15 4:41 p.m.10 views

thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume th...

8.8CVSS7.4AI score0.00306EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/10/14 12:27 p.m.6 views

CVE-2025-11715

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in...

8.8CVSS8.5AI score0.00306EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/14 12:27 p.m.28 views

CVE-2025-11714 Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...

0.00313EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.3 views

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2025:03462-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03462-1 advisory. Update to Firefox Extended Support Release 140.3.1 ESR bsc1250452. - Improved reliability when HTTP/3...

5.9AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/10/06 1:30 a.m.15 views

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume th...

8.8CVSS7.4AI score0.00328EPSS
SaveExploits0References6
OSV
OSV
added 2025/09/29 12:00 a.m.7 views

DLA-4305-2 firefox-esr - regression update

Bulletin has no description...

7AI score
SaveExploits0
Debian
Debian
added 2025/09/28 11:04 a.m.13 views

[SECURITY] [DSA 6003-2] firefox-esr update

------------------------------------------------------------------------- Debian Security Advisory DSA-6003-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 28, 2025 https://www.debian.org/security/faq -...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/28 12:00 a.m.8 views

DSA-6003-2 firefox-esr - regression update

Bulletin has no description...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/23 12:00 a.m.3 views

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2025:03291-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03291-1 advisory. Firefox Extended Support Release 140.3.0 ESR bsc1249391. MFSA 2025-75: CVE-2025-10527 bmo198482...

8.8CVSS7AI score0.00737EPSS
SaveExploits0References16
OpenVAS
OpenVAS
added 2025/09/22 12:00 a.m.5 views

Debian: Security Advisory (DLA-4305-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.00737EPSS
SaveExploits0References2
Redos
Redos
added 2025/09/22 12:00 a.m.9 views

ROS-20250922-01

Vulnerability in Mozilla Firefox and Firefox ESR browsers, Thunderbird mail client is related to an operation exceeding the buffer boundaries when processing XPath expressions. operation exceeds buffer boundaries in memory when processing XPath expressions. Exploitation of the vulnerability could...

8.1CVSS8AI score0.00478EPSS
SaveExploits0
CNVD
CNVD
added 2025/09/18 12:00 a.m.6 views

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-24646)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

6.5CVSS6.7AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/16 1:15 p.m.7 views

CVE-2025-10527

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

7.1CVSS0.00277EPSS
SaveExploits0References7
Rows per page
Query Builder