Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmmm-6m78-44q2

Опубликовано: 28 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox < 144.0.2.

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox < 144.0.2.

EPSS

Процентиль: 24%
0.00315
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
ubuntu
9 месяцев назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
nvd
9 месяцев назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
debian
9 месяцев назад

Starting with Firefox 142, it was possible for a compromised child pro ...

CVSS3: 9.6
fstec
10 месяцев назад

Уязвимость браузера Mozilla Firefox, связанная с возможностью использования памяти после освобождения, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 24%
0.00315
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416