Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-728v-c7pv-wm7x

Опубликовано: 19 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

EPSS

Процентиль: 16%
0.00245
Низкий

8.1 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 8.1
ubuntu
12 месяцев назад

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

CVSS3: 7.5
redhat
12 месяцев назад

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

CVSS3: 8.1
nvd
12 месяцев назад

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

CVSS3: 8.1
debian
12 месяцев назад

Same-origin policy bypass in the Graphics: Canvas2D component. This vu ...

CVSS3: 4.3
fstec
12 месяцев назад

Уязвимость компонента Canvas2D браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 16%
0.00245
Низкий

8.1 High

CVSS3

Дефекты

CWE-346