Lucene search
+L

2688 matches found

Amazon
Amazon
added 2026/01/05 12:00 a.m.17 views

Important: thunderbird

Issue Overview: Race condition in the Graphics component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30. CVE-2025-13012 Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30...

9.8CVSS7.4AI score0.00583EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.6 views

PT-2026-26515

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A stack buffer overflow exists in the WebRTC component of Google Chrome. This issue could allow a remote attacker to potentially exploit stack corruption through a specially crafted HT...

8.8CVSS6.3AI score0.00415EPSS
SaveExploits2References38
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.6 views

PT-2026-21690

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description The issue involves incorrect boundary conditions within th...

10CVSS5.8AI score0.00604EPSS
SaveExploits3References218
EUVD
EUVD
added 2025/12/25 6:30 a.m.8 views

EUVD-2025-205366

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service...

7.5CVSS6.3AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/25 5:16 a.m.13 views

CVE-2025-66443

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service...

7.5CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/25 12:00 a.m.24 views

CVE-2025-66443

CVE-2025-66443 affects Pexip Infinity 35.0–38.1 (before 39.0) in non-default configurations that use Direct Media for WebRTC. The issue is improper input validation in the signaling path, allowing an attacker to trigger a software abort and cause a temporary denial of service. Red Hat and other s...

7.5CVSS6.4AI score0.00305EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/25 12:00 a.m.27 views

CVE-2025-66443

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a temporary denial of service...

7.5CVSS0.00305EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/12/22 1:36 p.m.13 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

9.8CVSS7.3AI score0.00583EPSS
SaveExploits2References11
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:00 a.m.5 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2025:4396-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4396-1 advisory. Update to Firefox Extended Support Release 140.6.0 ESR bsc1254551. - MFSA 2025-94 CVE-2025-14321: use-after-free in the WebRTC: Signaling...

9.8CVSS7AI score0.00583EPSS
SaveExploits2References22
Mageia
Mageia
added 2025/12/15 8:06 p.m.17 views

Updated nspr, nss & firefox packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 JIT miscompilation in the JavaScript Engine: JIT...

9.8CVSS7.8AI score0.00583EPSS
SaveExploits2References9
OSV
OSV
added 2025/12/15 8:06 p.m.14 views

MGASA-2025-0328 Updated nspr, nss & firefox packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 JIT miscompilation in the JavaScript Engine: JIT...

9.8CVSS7.6AI score0.00583EPSS
SaveExploits2References10
OSV
OSV
added 2025/12/15 11:26 a.m.7 views

SUSE-SU-2025:4397-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.6 bsc1254551. - MFSA 2025-96 CVE-2025-14321: use-after-free in the WebRTC: Signaling component. CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits2References12
OSV
OSV
added 2025/12/15 11:24 a.m.6 views

SUSE-SU-2025:4396-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR bsc1254551. - MFSA 2025-94 CVE-2025-14321: use-after-free in the WebRTC: Signaling component. CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics:...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:00 a.m.9 views

AlmaLinux 9 : firefox (ALSA-2025:23034)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23034 advisory. firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 CVE-2025-14333 firefox: Use-after-free in...

9.8CVSS8.7AI score0.00583EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.4 views

FreeBSD : Mozilla -- Use-after-free (9525edbf-d6a8-11f0-8e1b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9525edbf-d6a8-11f0-8e1b-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1992760 reports: Use-after-free in the WebRTC: Signaling...

9.8CVSS8.6AI score0.00583EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.4 views

RockyLinux 10 : firefox (RLSA-2025:23035)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23035 advisory. firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 CVE-2025-14333 firefox: Use-after-free i...

9.8CVSS8.7AI score0.00583EPSS
SaveExploits2References21
RedHat Linux
RedHat Linux
added 2025/12/10 1:32 p.m.7 views

firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

9.8CVSS5.7AI score0.00583EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2025/12/10 1:07 p.m.7 views

firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

9.8CVSS5.7AI score0.00583EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2025/12/10 12:00 a.m.8 views

RHEL 10 : firefox (RHSA-2025:23035)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:23035 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

9.8CVSS8.8AI score0.00583EPSS
SaveExploits2References22
OSV
OSV
added 2025/12/09 4:17 p.m.6 views

CVE-2025-14321

Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS5.8AI score
SaveExploits0References5
Rows per page
Query Builder