Lucene search
+L

2548 matches found

Cvelist
Cvelist
•added 2025/02/04 1:58 p.m.•45 views

CVE-2025-1011 A bug in WebAssembly code generation could result in a crash

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

0.00633EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/02/04 1:58 p.m.•10 views

CVE-2025-1011 A bug in WebAssembly code generation could result in a crash

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

7.3AI score0.00633EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/02/04 1:58 p.m.•10 views

CVE-2025-1011

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

9.8CVSS8.5AI score0.00633EPSS
SaveExploits0
CVE
CVE
•added 2025/02/04 1:58 p.m.•338 views

CVE-2025-1011

A bug in WebAssembly code generation could lead to a crash in Mozilla Firefox , Firefox ESR , and Thunderbird (including Thunderbird ESR ). Attackers might leverage this vulnerability to achieve code execution . The issue has been addressed in Firefox 135 , Firefox ESR 128.7 , Thunderbird 128.7 ,...

9.8CVSS7.3AI score0.00633EPSS
SaveExploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•19 views

Mozilla Thunderbird < 135.0

The version of Thunderbird installed on the remote Windows host is prior to 135.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-11 advisory. - Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory...

9.8CVSS7.5AI score0.0137EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•10 views

Mozilla Firefox < 135.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 135.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-07 advisory. - Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory...

9.8CVSS7.4AI score0.01207EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•11 views

Mozilla Firefox ESR < 128.7

The version of Firefox ESR installed on the remote Windows host is prior to 128.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-09 advisory. - Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of thes...

9.8CVSS7.5AI score0.01207EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•11 views

Mozilla Firefox < 135.0

The version of Firefox installed on the remote Windows host is prior to 135.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-07 advisory. - Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption...

9.8CVSS7.4AI score0.01207EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•20 views

Mozilla Thunderbird < 135.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 135.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-11 advisory. - Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of...

9.8CVSS7.5AI score0.0137EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•8 views

PT-2025-4124

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 135 Firefox ESR versions prior to 128.7 Thunderbird versions prior to 128.7 Thunderbird versions prior to 135 Description A bug in WebAssembly code generation could have led to a crash, potentially allowing an attacke...

9.8CVSS7.1AI score0.23184EPSS
SaveExploits4References276
Mozilla
Mozilla
•added 2025/02/04 12:00 a.m.•25 views

Security Vulnerabilities fixed in Thunderbird ESR 128.7 — Mozilla

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. A bug in WebAssembly code generation could have lead to a cras...

9.8CVSS10AI score0.08467EPSS
SaveExploits0References11Affected Software1
CNNVD
CNNVD
•added 2025/02/04 12:00 a.m.•6 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 135, which stems from an error in WebAssembly code generation that could cause a crash...

9.8CVSS8.3AI score0.00633EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•0 views

CVE-2025-1011: Improper Control of Generation of Code

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

9.8CVSS6.2AI score0.00633EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2025/02/04 12:00 a.m.•21 views

mozilla -- multiple vulnerabilities

[email protected] reports: A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have...

9.8CVSS8.2AI score0.00633EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•15 views

Mozilla Thunderbird < 128.7

The version of Thunderbird installed on the remote Windows host is prior to 128.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-10 advisory. - Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of thes...

9.8CVSS7.5AI score0.0137EPSS
SaveExploits0References12
OSV
OSV
•added 2025/02/03 5:37 a.m.•13 views

USN-7250-1 netdata vulnerabilities

It was discovered that Netdata incorrectly handled parsing JSON input, which could lead to a JSON injection. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2018-18836 It was discovered that Netdata incorrectly handled parsing HT...

9.1CVSS7.5AI score0.02172EPSS
SaveExploits8References8
Microsoft CVE
Microsoft CVE
•added 2025/01/18 8:00 a.m.•17 views

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)

...

6.5CVSS6.5AI score0.00452EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•10 views

PT-2025-40348

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A use-after-free condition exists in V8 when evaluating the compile-time options parameter, which detaches the ArrayBuffer holding the wire bytes. This issue was reported by Google Big Sleep...

8.8CVSS6.4AI score0.00361EPSS
SaveExploits0References42
OSV
OSV
•added 2024/12/16 1:56 p.m.•24 views

BIT-NODE-MIN-2023-39333

Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability...

6.4AI score0.00936EPSS
SaveExploits0References5
Oracle linux
Oracle linux
•added 2024/11/14 12:00 a.m.•263 views

webkit2gtk3 security update

2.44.3-2 - Add patch to fix WebAssembly Resolves: RHEL-32578 2.44.3-1 - Update to 2.44.3 Resolves: RHEL-32578 2.44.2-1 - Update to 2.44.2 Resolves: RHEL-32578 2.44.1-1 - Update to 2.44.1 Resolves: RHEL-32578 Resolves: RHEL-29637 2.42.5-1 - Update to 2.42.5 Resolves: RHEL-3960 2.42.4-1 - Update to...

9.6CVSS7.3AI score0.01533EPSS
SaveExploits1
Rows per page
Query Builder