CVE-2025-11709

CVE-2025-11709 is documented across multiple sources (Mozilla advisories and Amazon/Linux bulletins) as a memory-safety/out-of-bounds issue triggered by manipulated WebGL textures in a compromised web process, affecting Firefox and Thunderbird before version 144 (and ESR branches like ESR 115.29/...

CVE-2025-11709 Out of bounds read/write in a privileged process triggered by WebGL textures

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

CVE-2025-11709

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

MAL-2025-48410 Malicious code in kmf-cookiecatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43f34feaa70eda2d6c1595e358d6c566d1c56c87a35c2c4cb191f4d38c279564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48406 Malicious code in company-logo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3356f69fe3ebba321196add643af22e2daaff13de896d2ad82a6d79d9c381709 Any computer that has this package installed or running should be considered...

Malicious code in company-access-pending (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfec3b870b7eafccef0a535e03adb6bf0728eaa79ca63e248fa07593eb20361 Any computer that has this package installed or running should be considered...

Malicious code in company-overview (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bf8d3a72c075224c157c2cf2307e520204ee333e3107d1f1b1bc6992b21dd4 Any computer that has this package installed or running should be considered...

Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

MAL-2025-48408 Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

Malicious code in private-callouts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2946aeff32829327711ed5cbdd0127273806a52a23e9be1f96113c04562bc6 Any computer that has this package installed or running should be considered...

Malicious code in debug-mj (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f60289f1a0f9296cf8aa9ed744c256c0963a95dc751ff52a708d2676d14825a Any computer that has this package installed or running should be considered...

Mozilla -- Memory disclosure

[email protected] reports: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

Mozilla -- Out-of-bounds reads and writes

[email protected] reports: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures...

PT-2025-41897

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 115.29 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A compromised web process could trigger out-of-bounds read...

Malicious code in graphorbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e39cb6a782c7394e47a516577dd7696fc2db73d710cdd07e5ceec3dbc46c7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

Malicious code in internallib_v190 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75787b9471cecb41a09915fbec6bf00bf40073c0f2da3ad342ee9fb1c83a366c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48327 Malicious code in internallib_v600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2f6cf9ace9deb6352b5110f9550afd90c905590229ba3a589e3ad7cbb8d67f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v838 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a033080221d18397e6453d359fc3e59ebab68f195bd8faa9def63ff1426ca8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...