CVE-2021-36773

CVE-2021-36773 affects the browser extensions uBlock Origin (before 1.36.2) and nMatrix (before 4.4.9). The vulnerability arises from allowing an arbitrary depth of parameter nesting in strict blocking, which can be exploited by crafted websites to trigger unbounded recursion, resulting in memory...

CVE-2025-4215

CVE-2025-4215 affects gorhill uBlock Origin up to 1.63.3b16, specifically the UI function currentStateChanged in src/js/1p-filters.js. The issue is described as an inefficient regular expression pattern used in filters, which can be triggered remotely and carries a relatively high attack complexi...

CVE-2019-11595

CVE-2019-11595 concerns uBlock before 0.9.5.15, where the $rewrite filter option enables filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script via XMLHttpRequest or Fetch if the script origin has an open redirect. The Red Hat advisory confirms th...