CVE-2025-11719

Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

Malicious Package

Overview optional-native-module-xyz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

PT-2025-41907

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory...

KLA89242 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

Security Vulnerabilities fixed in Firefox 144 — Mozilla

Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...

EUVD-2025-33320

Malicious code in optional-native-module-abc npm...

Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

MAL-2025-48093 Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

EUVD-2017-15957

Malware in sbrugna...

EUVD-2021-23105

Malware in sbrugna...

EUVD-2009-5017

Malware in sbrugna...

EUVD-2018-0518

Malware in sbrugna...

EUVD-2018-19721

Malware in sbrugna...

EUVD-2007-4950

Malware in sbrugna...

EUVD-2018-4507

Malware in sbrugna...

EUVD-2021-1178

Malware in sbrugna...

EUVD-2013-1748

Malware in sbrugna...

EUVD-2011-2955

Malware in sbrugna...

EUVD-2021-1161

Malware in sbrugna...

EUVD-2013-0895

Malware in sbrugna...