Mozilla -- use-after-free error

[email protected] reports: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

Mozilla多款产品 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source Web browser. Mozilla Thunderbird is a separate set of Mozilla Application Suite Email client software. The program supports IMAP, POP mail protocols, and HTML mail...

PT-2025-14109

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue concerns memory safety bugs that were present in certain versions of Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption, and it...

Mozilla Firefox ESR < 115.22

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.22. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-21 advisory. - JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after- free...

Mozilla Thunderbird < 137.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 137.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-23 advisory. - Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of...

OPENSUSE-SU-2025:14948-1 MozillaFirefox-136.0.4-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-136.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox ESR < 115.21.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.21.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-19 advisory. - Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our...

Mozilla Firefox ESR Security Update (MFSA2025-19) - Windows

Firefox ESR is prone to a sandbox escape vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Update (MFSA2025-19) - Windows

Mozilla Firefox is prone to a sandbox escape vulnerability SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR < 115.21.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.21.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-19 advisory. - Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar...

Mozilla Firefox ESR < 128.8.1

The version of Firefox ESR installed on the remote Windows host is prior to 128.8.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-19 advisory. - Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 136.0.4 and...

KLA82139 SB vulnerability in Mozilla Firefox ESR

Security vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2025-19 Related products Mozilla-Firefox-ESR CVE list CVE-2025-2857 critical Solution Update to the latest version Download Firefox ESR...

KLA82138 SB vulnerability in Mozilla Firefox

Security vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2025-19 Related products Mozilla-Firefox CVE list CVE-2025-2857 critical Solution Update to the latest version Download Firefox Impacts SB...

GHSA-3P6V-HRG8-8QJ7 @mozilla/readability Denial of Service through Regex

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...

@mozilla/readability Denial of Service through Regex

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...

0xkobold (>=0.5.0, <=0.8.0), @0xdwong/html-to-markdown (>=1.0.0, <=1.0.1) +405 more potentially affected by CVE-2025-2792 via @mozilla/readability (>=0.3.0, <=0.5.0)

@mozilla/readability NPM version =0.3.0, =0.5.0, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =1.6.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-2792 Source advisory: OSV:GHSA-3P6V-HRG8-8QJ7...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

It is an offensive tool for web exploitation. This repository co...

The vulnerability in the WebChannel API interface of Mozilla Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, allows a perpetrator to escalate their privileges.

The vulnerability of the WebChannel API interface in browsers such as Mozilla Firefox, Firefox ESR, and email clients like Thunderbird, Thunderbird ESR, is related to authentication process flaws. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

RHEL 8 : thunderbird (RHSA-2025:3009)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3009 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 136...