Lucene search
K

4499 matches found

Cvelist
Cvelist
added 2025/12/09 1:37 p.m.18 views

CVE-2025-14324 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

0.00481EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2025/12/09 1:37 p.m.1 views

CVE-2025-14324

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS7.2AI score0.00481EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146 and Firefox...

9.8CVSS6.8AI score0.00422EPSS
Exploits0References5
Kaspersky
Kaspersky
added 2025/12/09 12:0 a.m.6 views

KLA90807 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrect boundary conditions vulnerability in the Graphics...

9.8CVSS7.3AI score0.00481EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146, Firefox ES...

9.8CVSS6.8AI score0.00481EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 146 and ESR 140.6, which stems from a compilation error in the JavaScript Engine JIT component that could lead to code execution...

7.3CVSS6.7AI score0.00292EPSS
Exploits1References5
Kaspersky
Kaspersky
added 2025/12/09 12:0 a.m.8 views

KLA90817 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in the...

9.8CVSS8.9AI score0.00498EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.2 views

Mozilla Firefox ESR < 140.6

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-94 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR...

9.8CVSS8.6AI score0.00498EPSS
Exploits2References11
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-14325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird...

7.3CVSS7.1AI score0.00292EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-14330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird...

9.8CVSS7.3AI score0.00422EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-14324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146,...

9.8CVSS7.3AI score0.00481EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.0 views

Mozilla Firefox ESR < 115.31

The version of Firefox ESR installed on the remote Windows host is prior to 115.31. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-93 advisory. - Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox 146, Firefox ESR...

9.8CVSS8.7AI score0.00481EPSS
Exploits0References5
FreeBSD
FreeBSD
added 2025/12/09 12:0 a.m.5 views

Mozilla -- JIT miscompilation in the JavaScript Engine: JIT component

https://bugzilla.mozilla.org/showbug.cgi?id=1997503 reports: JIT miscompilation in the JavaScript Engine: JIT component...

9.8CVSS7AI score0.00422EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2025/12/09 12:0 a.m.9 views

Mozilla -- JIT miscompilation

https://bugzilla.mozilla.org/showbug.cgi?id=1998050 reports: JIT miscompilation in the JavaScript Engine: JIT component...

9.8CVSS7AI score0.00481EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/12/08 3:0 p.m.5 views

CVE-2025-13630

Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.6AI score0.00379EPSS
Exploits0References5
CNVD
CNVD
added 2025/12/08 12:0 a.m.4 views

Google Chrome Competitive Conditions Vulnerability

Google Chrome is a web browser developed by Google Inc. to provide users with a fast, secure and customizable web browsing experience. Google Chrome suffers from a competitive condition vulnerability that stems from the presence of a competitive condition in v8, which can be exploited by an...

7.5CVSS6.1AI score0.00184EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/05 12:0 a.m.3 views

openSUSE 16 Security Update : mozjs128 (openSUSE-SU-2025-20135-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20135-1 advisory. - Update to version 128.14.0 bsc1248162: - CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component - CVE-2025-918...

9.8CVSS7.1AI score0.03057EPSS
Exploits0References53
OPENSUSE Linux
OPENSUSE Linux
added 2025/12/04 12:0 a.m.3 views

Security update for mozjs128 (important)

openSUSE security update: security update for mozjs128 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20135-1 Rating: important References: bsc1248162 Cross-References: CVE-2025-5263 CVE-2025-5264 CVE-2025-5265 CVE-2025-5266 CVE-2025-5267...

8.8CVSS7AI score0.03057EPSS
Exploits0References1
OSV
OSV
added 2025/12/03 8:41 p.m.3 views

OPENSUSE-SU-2025-20135-1 Security update for mozjs128

This update for mozjs128 fixes the following issues: - Update to version 128.14.0 bsc1248162: + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181: Uninitialized memo...

9.8CVSS7.6AI score0.03057EPSS
Exploits0References27
OSV
OSV
added 2025/12/03 8:38 p.m.3 views

SUSE-SU-2025:21170-1 Security update for mozjs128

This update for mozjs128 fixes the following issues: - Update to version 128.14.0 bsc1248162: + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181: Uninitialized memo...

9.8CVSS6.4AI score0.03057EPSS
Exploits0References28
Rows per page
Query Builder