CVE-2025-3028

CVE-2025-3028 describes a use-after-free in memory handling when JavaScript runs during XSLTProcessor document transformation. Affected products include Firefox versions before 137 and Firefox ESR before 115.22/128.9, and Thunderbird versions before 137/128.9. Public advisories (e.g., ALAS2FIREFO...