Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2w7r-ggfp-x894

Опубликовано: 14 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

EPSS

Процентиль: 19%
0.00061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
20 дней назад

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 9.8
nvd
20 дней назад

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox < 144, Firefox ESR < 115.29, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

CVSS3: 9.8
debian
20 дней назад

A compromised web process was able to trigger out of bounds reads and ...

CVSS3: 9.8
fstec
20 дней назад

Уязвимость компонента WebGL Texture Handler браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

rocky
11 дней назад

Important: thunderbird security update

EPSS

Процентиль: 19%
0.00061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787