CVE-2025-10534

Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143...

CVE-2025-10535

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143...

CVE-2025-10536

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10528

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10527

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2025-10201

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

MAL-2025-46094 Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

MAL-2025-46097 Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46095 Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46098 Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

MAL-2025-46096 Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

CVE-2025-7445

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs...

CVE-2025-9864

Rejected reason: This CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn...

CVE-2025-9866

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...