ALSA-2025:14844 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-917...

Linux Distros Unpatched Vulnerability : CVE-2022-27470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTFRenderTextSolid. This vulnerability is triggered via a crafted...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape due to invalid point...

RHEL 8 : firefox (RHSA-2025:14442)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:14442 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2025-9182

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service due to out-of-memory in the Graphics: WebRender component...

UBUNTU-CVE-2025-9182

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2...

Mozilla Thunderbird < 140.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-72 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ES...

Mozilla多款产品 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source Web browser.Mozilla Thunderbird is a separate set of Mozilla Application Suite Email client software. The program supports IMAP, POP mail protocols, and HTML mail...

CVE-2025-55286

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...

Linux Distros Unpatched Vulnerability : CVE-2023-25360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely. CVE-2023-25360 Note that...

Malicious code in render-loop (npm)

The package render-loop was found to contain malicious code...

Malicious code in webpack-sever-render-middleware (npm)

The package webpack-sever-render-middleware was found to contain malicious code...

Malicious code in cicada-render (npm)

The package cicada-render was found to contain malicious code...

Malicious code in com.unity.render-pipelines.core (npm)

The package com.unity.render-pipelines.core was found to contain malicious code...

MAL-2025-32073 Malicious code in render-loop (npm)

The package render-loop was found to contain malicious code...

MAL-2025-17362 Malicious code in com.unity.render-pipelines.universal (npm)

The package com.unity.render-pipelines.universal was found to contain malicious code...

MAL-2025-17016 Malicious code in cicada-render (npm)

The package cicada-render was found to contain malicious code...

MAL-2025-17361 Malicious code in com.unity.render-pipelines.core (npm)

The package com.unity.render-pipelines.core was found to contain malicious code...

MAL-2025-39034 Malicious code in webpack-sever-render-middleware (npm)

The package webpack-sever-render-middleware was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-29952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been...