Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmmm-6m78-44q2

Опубликовано: 28 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox < 144.0.2.

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox < 144.0.2.

EPSS

Процентиль: 27%
0.00338
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 года назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
nvd
около 1 года назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
debian
около 1 года назад

Starting with Firefox 142, it was possible for a compromised child pro ...

CVSS3: 9.6
fstec
около 1 года назад

Уязвимость браузера Mozilla Firefox, связанная с возможностью использования памяти после освобождения, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
altlinux
12 месяцев назад

ALT-PU-2025-14358: package `firefox` update to version 145.0-alt1

EPSS

Процентиль: 27%
0.00338
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416