PT-2025-3812

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134.0.2 Firefox ESR versions prior to 140.4.0 Thunderbird versions prior to 138.0 Thunderbird versions prior to 137.0 Description The software is affected by memory safety flaws that could allow for arbitrary code...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from the fact that parsing a JavaScript module as JSON could lead to cross-compartment access under certain...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 134, which stems from the presence of a memory security flaw...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from the WebChannel API used to transfer various information across processes, which did not check for the...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability previously existed in Mozilla Firefox version 134, which stemmed from an attacker being able to spoof the address bar when redirected to an invalid protocol sche...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from the fact that under certain circumstances, the user opt-in setting of Focus, which requires authentication...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from an assumed controlled memory allocation failure that could be used by an attacker to cause a crash that...

PT-2025-3810

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Description A user opt-in setting that requires authentication before using Focus could be bypassed under certain circumstances. Recommendations For versions prior to 134, update to a version that includes the fix...

PT-2025-3809

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Description When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. This issue only affects Android operating systems, with other operating systems being unaffected. Recommendation...