Lucene search
+L

5751 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.1 views

FreeBSD : Mozilla -- memory corruption in GMP (f42ee983-7eb0-11f0-ba14-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f42ee983-7eb0-11f0-ba14-b42e991fc52e advisory. [email protected] reports: An attacker was able to perform memory corruption in the GMP process whic...

9.8CVSS8.3AI score0.00568EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/08/25 8:6 a.m.6 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00568EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/08/25 2:7 a.m.7 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00568EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-10376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gajim through 0.16.7 unconditionally implements the XEP-0146: Remote Controlling Clients extension. This can be abused by malicious XMPP servers to, for example...

4.5CVSS4.9AI score0.01153EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-10735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub- parts within a crafted multipart email. The encrypted...

4.3CVSS6.1AI score0.0061EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/22 11:36 a.m.6 views

OESA-2025-2065 ansible security update

\ Security Fixes: A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble...

5.5CVSS6.8AI score0.00379EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/21 11:59 a.m.9 views

CVE-2025-9179

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/08/20 11:33 p.m.4 views

SUSE CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

7.5CVSS7.2AI score0.00568EPSS
SaveExploits0References11
Qualys Blog
Qualys Blog
added 2025/08/20 3:0 p.m.11 views

How Agentic AI Helps with Adaptive Cloud Risk Assessment with Agent Vikram

In fast-moving cloud environments like AWS, security teams face an uncomfortable truth: not every EC2 instance is being scanned, existing tools don’t work across a diverse environment that includes long-lived and ephemeral assets, and visibility is never complete. Qualys research found that over...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/08/19 9:15 p.m.1 views

DEBIAN-CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.6AI score0.00568EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/08/19 9:15 p.m.4 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS6.7AI score0.00568EPSS
SaveExploits0References10
OSV
OSV
added 2025/08/19 9:15 p.m.5 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS6.5AI score
SaveExploits0References10
OSV
OSV
added 2025/08/19 9:15 p.m.18 views

UBUNTU-CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS7.2AI score0.00568EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2025/08/19 8:33 p.m.23 views

CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

0.00568EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2025/08/19 8:33 p.m.6 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS5.8AI score0.00568EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/08/19 8:33 p.m.6 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.6AI score0.00568EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/08/19 8:33 p.m.3 views

CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

7.2AI score0.00568EPSS
SaveExploits0References8
CVE
CVE
added 2025/08/19 8:33 p.m.112 views

CVE-2025-9179

CVE-2025-9179 describes a memory corruption vulnerability in the GMP process used by Firefox/Thunderbird for encrypted media handling, with privileges that are sandboxed yet could allow total impact (CVE-2025-9179). Affected products include Firefox < 142, Firefox ESR < 115.27/128.14/140.2,...

9.8CVSS7.2AI score0.00568EPSS
SaveExploits0References10Affected Software2
The Hacker News
The Hacker News
added 2025/08/19 11:24 a.m.14 views

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence DNI Tulsi Gabbard, in a statement posted on X, said the U.S...

6.7AI score
SaveExploits0
Hacker One
Hacker One
added 2025/08/19 11:17 a.m.13 views

Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner...

3.5CVSS5.8AI score0.00203EPSS
SaveExploits0
Rows per page
Query Builder