Lucene search
+L

16840 matches found

ATTACKERKB
ATTACKERKB
added 2025/12/09 1:37 p.m.4 views

CVE-2025-14323

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

8.8CVSS7.2AI score0.00351EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/12/09 1:37 p.m.3 views

CVE-2025-14323 Privilege escalation in the DOM: Notifications component

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

7.2AI score0.00351EPSS
SaveExploits0References6
CVE
CVE
added 2025/12/09 1:37 p.m.29 views

CVE-2025-14323

CVE-2025-14323 describes a privilege-escalation vulnerability in the DOM: Notifications component affecting Firefox < 146, Firefox ESR < 115.31, and Firefox ESR

8.8CVSS7.2AI score0.00351EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2025/12/09 1:37 p.m.41 views

CVE-2025-14323 Privilege escalation in the DOM: Notifications component

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

0.00351EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/12/09 1:37 p.m.6 views

CVE-2025-14323

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

8.8CVSS7.9AI score0.00351EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/12/09 1:37 p.m.2 views

CVE-2025-14323

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

8.8CVSS7.2AI score0.00351EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/12/09 7:58 a.m.11 views

firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...

8.1CVSS5.7AI score0.00249EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/12/09 7:56 a.m.8 views

firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...

8.1CVSS5.7AI score0.00249EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.12 views

PT-2025-50014

Missing Authorization vulnerability in Gravitec.net - Web Push Notifications Gravitec.net Web Push Notifications gravitec-net-web-push-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gravitec.net Web Push Notifications: from n/a through =...

7AI score0.00209EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-14323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, a...

8.8CVSS7.2AI score0.00351EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.2 views

Mozilla Firefox ESR < 140.6

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-94 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR...

9.8CVSS8.6AI score0.00517EPSS
SaveExploits2References11
Mozilla
Mozilla
added 2025/12/09 12:0 a.m.16 views

Security Vulnerabilities fixed in Firefox ESR 115.31 — Mozilla

CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component Reporter Oskar L Impact high References Bug 1996473 CVE-2025-14323: Privilege escalation in the DOM: Notifications component Reporter tiebuchen Impact high References Bug 1996555...

9.8CVSS7.2AI score0.0049EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 146, Firefox ESR versions prior to 115.31, and versions prior to 140.6, which stems from improper privilege management of the DOM...

8.8CVSS6.2AI score0.00351EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.4 views

Mozilla Firefox ESR < 140.6

The version of Firefox ESR installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-94 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR 140.6...

9.8CVSS8.7AI score0.00517EPSS
SaveExploits2References11
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.5 views

Mozilla Firefox < 146.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 146.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-92 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR...

9.8CVSS8.6AI score0.00517EPSS
SaveExploits2References14
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.0 views

Mozilla Firefox ESR < 115.31

The version of Firefox ESR installed on the remote Windows host is prior to 115.31. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-93 advisory. - Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox 146, Firefox ESR...

9.8CVSS8.7AI score0.0049EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2025/12/09 12:0 a.m.7 views

Mozilla -- Privilege escalation

https://bugzilla.mozilla.org/showbug.cgi?id=1996555 reports: Privilege escalation in the DOM: Notifications component...

8.8CVSS7.2AI score0.00351EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/08 6:30 p.m.8 views

EUVD-2025-201782

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS6.3AI score0.00093EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/08 5:16 p.m.8 views

CVE-2025-48525

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00093EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/08 5:16 p.m.5 views

CVE-2025-48525

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS5.9AI score0.00093EPSS
SaveExploits0References3
Rows per page
Query Builder