CVE-2020-9545

CVE-2020-9545 affects Pale Moon 28.x prior to 28.8.4. The vulnerability is a segmentation fault related to the module scripting subsystem, demonstrated by a Lacoste site. Multiple connected sources (NVD, Red Hat advisory references, and vendor records) confirm the same description. No root-cause ...

CVE-2013-1591

CVE-2013-1591 describes a stack-based buffer overflow in the pixman library (libpixman), used by Pale Moon prior to 15.4. The issue is triggered by a path related to pixman’s manipulation routines and may cause crashes or, per some sources, potentially more severe outcomes. Connected advisories i...

CVE-2018-12292

CVE-2018-12292 affects Pale Moon prior to 27.9.3, with a use-after-free in DOMProxyHandler::EnsureExpandoObject. The vulnerability can enable memory corruption and reliability issues in the affected browser build. Exploitation details are provided in public PoC/exploit descriptions for Windows (e...