CVE-2025-11719

Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

Security Vulnerabilities fixed in Firefox 144 — Mozilla

Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...

KLA89242 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

PT-2025-41907

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory...

[SECURITY] Fedora 39 Update: golang-github-nats-io-1.31.0-1.fc39

Golang client for NATS, the cloud native messaging system...

Fedora: Security Advisory for golang-github-nats-io (FEDORA-2023-6b89bc0305)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: golang-github-nats-io-1.30.1-1.fc39

Golang client for NATS, the cloud native messaging system...

[SECURITY] Fedora 38 Update: golang-github-nats-io-1.30.1-3.fc38

Golang client for NATS, the cloud native messaging system...

Avira Operations Antivirus Information Disclosure Vulnerability

Avira Operations Antivirus is a suite of antivirus software from Avira Operations. A security vulnerability exists in Avira Operations Antivirus 15.0.2005.1866 and earlier versions, which originates from a failure to validate the calling program of the Avira.PWM.NativeMessaging.exe executable use...

CVE-2020-12680

Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the calling program and th...

PT-2020-13201 · Mozilla +4 · Firefox +4

Name of the Vulnerable Software and Affected Versions: Avira Free Antivirus versions 15.0.2005.1866 and earlier Description: The issue allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in...

Google to Block Third-Party Software from Injecting Code into Chrome Browser

To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...

Cisco WebEx - nativeMessaging Arbitrary Remote Command Execution Vulnerability

Exploit for windows platform in category remote exploits Cisco's WebEx extension jlhmfgmfgeifomenelglieieghnjghma has 20M active users, and is part of Cisco's popular web conferencing software. The extension works on any URL that contains the magic pattern...

Cisco WebEx Browser Plugin Remote Code Execution Vulnerability

Cisco WebEx is a browser extension plug-in and part of the Cisco web conferencing software. A remote code execution vulnerability exists in the Cisco WebEx browser plug-in. The extension uses nativeMessaging, and an attacker can exploit the vulnerability to execute arbitrary code in a browser usi...