Lucene search
+L

369 matches found

Mageia
Mageia
added 2025/12/15 8:6 p.m.11 views

Updated thunderbird packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 IT miscompilation in the JavaScript Engine: JIT...

9.8CVSS7.8AI score0.00517EPSS
Exploits2References3
OSV
OSV
added 2025/12/15 8:6 p.m.6 views

MGASA-2025-0329 Updated thunderbird packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 IT miscompilation in the JavaScript Engine: JIT...

9.8CVSS7.6AI score0.00517EPSS
Exploits2References4
SUSE Linux
SUSE Linux
added 2025/12/15 11:24 a.m.7 views

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR bsc1254551. MFSA 2025-94 CVE-2025-14321: use-after-free in the WebRTC: Signaling component. CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics:...

8.8CVSS7.7AI score0.00517EPSS
Exploits2References22
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.4 views

RockyLinux 8 : firefox (RLSA-2025:23128)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23128 advisory. firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 CVE-2025-14333 firefox: Use-after-free in...

9.8CVSS8.7AI score0.00517EPSS
Exploits2References21
RedHat Linux
RedHat Linux
added 2025/12/11 2:8 p.m.22 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS7.3AI score0.00517EPSS
Exploits2References11
SUSE CVE
SUSE CVE
added 2025/12/11 12:46 a.m.5 views

SUSE CVE-2025-14321

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

8.8CVSS7.2AI score0.00517EPSS
Exploits1References15
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.5 views

RockyLinux 9 : firefox (RLSA-2025:23034)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23034 advisory. firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 CVE-2025-14333 firefox: Use-after-free in...

9.8CVSS8.7AI score0.00517EPSS
Exploits2References21
AlmaLinux
AlmaLinux
added 2025/12/10 12:0 a.m.6 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 CVE-2025-14333 firefox: Use-after-free in the WebRTC:...

9.8CVSS7.6AI score0.00517EPSS
Exploits2References22
Tenable Nessus
Tenable Nessus
added 2025/12/10 12:0 a.m.4 views

RHEL 9 : firefox (RHSA-2025:23034)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23034 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

9.8CVSS8.8AI score0.00517EPSS
Exploits2References22
Vulnrichment
Vulnrichment
added 2025/12/09 1:37 p.m.1 views

CVE-2025-14321 Use-after-free in the WebRTC: Signaling component

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

7.2AI score0.00517EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2025/12/09 1:37 p.m.3 views

CVE-2025-14321

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS8.4AI score0.00517EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-14321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS7.3AI score0.00517EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.3 views

RHEL 9 : firefox (RHSA-2025:22374)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22374 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

8.8CVSS6.2AI score0.00449EPSS
Exploits0References20
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.5 views

RHEL 9 : firefox (RHSA-2025:22375)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22375 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

8.8CVSS6.2AI score0.00449EPSS
Exploits0References20
Cvelist
Cvelist
added 2025/12/02 7:0 p.m.16 views

CVE-2025-13639

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

0.00225EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/02 7:0 p.m.2 views

CVE-2025-13639

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

6.2AI score0.00225EPSS
Exploits0References2
CVE
CVE
added 2025/12/02 7:0 p.m.36 views

CVE-2025-13639

Summary: CVE-2025-13639 is an issue in the WebRTC implementation of Google Chrome/Chromium. Affected component: WebRTC in Chrome/Chromium prior to version 143.0.7499.41. Impact: Remote attacker could cause arbitrary read/write via a crafted HTML page (confidentiality and integrity impact; availab...

8.1CVSS6.2AI score0.00225EPSS
Exploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2025/12/01 2:53 a.m.5 views

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

8.8CVSS5.7AI score0.00279EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/12/01 2:40 a.m.6 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

8.8CVSS7.5AI score0.00449EPSS
Exploits0References10
OSV
OSV
added 2025/12/01 12:0 a.m.5 views

ALSA-2025:22363 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox: Incorrect boundary...

8.8CVSS6.6AI score0.00449EPSS
Exploits0References20
Rows per page
Query Builder