5824 matches found
CVE-2025-11719 Use-after-free caused by the native messaging web extension API on Windows
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...
Malicious Package
Overview optional-native-module-xyz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Security Vulnerabilities fixed in Firefox 144 — Mozilla
Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...
PT-2025-41907
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory...
KLA89242 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...
EUVD-2025-33320
Malicious code in optional-native-module-abc npm...
Malicious code in optional-native-module-abc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...
MAL-2025-48093 Malicious code in optional-native-module-abc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...
EUVD-2017-15957
Malware in sbrugna...
EUVD-2021-23105
Malware in sbrugna...
EUVD-2018-0518
Malware in sbrugna...
EUVD-2018-19721
Malware in sbrugna...
EUVD-2008-4672
Malware in sbrugna...
EUVD-2007-4950
Malware in sbrugna...
EUVD-2018-4507
Malware in sbrugna...
EUVD-2021-1178
Malware in sbrugna...
EUVD-2013-1748
Malware in sbrugna...
EUVD-2011-2955
Malware in sbrugna...
EUVD-2021-1161
Malware in sbrugna...
EUVD-2013-0895
Malware in sbrugna...