Lucene search
K

4444 matches found

CNNVD
CNNVD
added 2025/10/28 12:0 a.m.1 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google. A security vulnerability exists in Google Chrome versions prior to 142.0.7444.59, which stems from a flaw in the V8 engine's handling of object types. The vulnerability can be exploited by an attacker to trigger heap corruption via specially...

8.8CVSS7.8AI score0.00087EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.1 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google. A security vulnerability exists in Google Chrome prior to version 142.0.7444.59, which stems from a flaw in the V8 engine's handling of object types. The vulnerability can be exploited by an attacker to trigger heap corruption via a specially...

8.8CVSS7.7AI score0.00087EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.3 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google. A security vulnerability exists in Google Chrome prior to version 142.0.7444.59, which stems from a flaw in the V8 engine's handling of object types. The vulnerability can be exploited by an attacker to trigger heap corruption via a specially...

8.8CVSS7.7AI score0.00114EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.2 views

PT-2025-47221

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.59 Description A type confusion issue exists in the V8 component of Google Chrome. This flaw could allow a remote attacker to exploit heap corruption through a specially designed HTML page...

8.8CVSS6.6AI score0.00127EPSS
Exploits2References82
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.2 views

PT-2025-47219

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.59 Description A type confusion issue exists in the V8 component of Google Chrome. This flaw could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page...

10CVSS6.5AI score0.00127EPSS
Exploits2References90
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.4 views

PT-2025-47223

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.59 Description A type confusion issue exists within the V8 component of Google Chrome. This flaw could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML...

10CVSS6.7AI score0.00127EPSS
Exploits2References89
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.2 views

PT-2025-47220

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.59 Description A type confusion issue exists in the V8 component of Google Chrome. This could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page...

8.8CVSS6.6AI score0.00127EPSS
Exploits2References81
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:0 a.m.5 views

TencentOS Server 3: firefox (TSSA-2025:0792)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0792 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS8.1AI score0.0021EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.2 views

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS, which stems from the jsprintobject function not properly handling array size changes during callbacks when printing arrays and collection objects, potentially leading to reuse...

8.8CVSS6.5AI score0.00028EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2025/10/14 1:15 p.m.1 views

CVE-2025-11713

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and...

8.1CVSS5.9AI score0.00041EPSS
Exploits0References10
UbuntuCve
UbuntuCve
added 2025/10/14 1:15 p.m.1 views

CVE-2025-11708

Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

9.8CVSS7.3AI score0.0009EPSS
Exploits0References10
UbuntuCve
UbuntuCve
added 2025/10/14 1:15 p.m.1 views

CVE-2025-11711

There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

6.5CVSS6.6AI score0.00031EPSS
Exploits0References11
UbuntuCve
UbuntuCve
added 2025/10/14 1:15 p.m.1 views

CVE-2025-11714

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...

8.8CVSS7.4AI score0.00061EPSS
Exploits0References11
UbuntuCve
UbuntuCve
added 2025/10/14 1:15 p.m.1 views

CVE-2025-11719

Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

9.8CVSS5.8AI score0.00066EPSS
Exploits0References5
Rockylinux
Rockylinux
added 2025/10/10 5:50 a.m.3 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

9.8CVSS7.4AI score0.0021EPSS
Exploits0
OSV
OSV
added 2025/10/10 5:50 a.m.3 views

RLSA-2025:14416 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape due to invalid point...

7.5CVSS7.4AI score0.0021EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:0 a.m.7 views

AlmaLinux 10 : firefox (ALSA-2025:14417)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:14417 advisory. firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape due...

9.8CVSS7.8AI score0.0021EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:0 a.m.2 views

AlmaLinux 10 : firefox (ALSA-2025:11797)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:11797 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...

9.8CVSS8.8AI score0.00781EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-15732

Malware in sbrugna...

8.8CVSS7.8AI score0.00709EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-7614

Malware in sbrugna...

9.3CVSS9.1AI score0.08675EPSS
Exploits0References4
Rows per page
Query Builder