Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614720232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 501

debian логотип

CVE-2025-1013

около 1 года назад

A race condition could have led to private browsing tabs being opened ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-1012

около 1 года назад

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-1012

около 1 года назад

A race during concurrent delazification could have led to a use-after- ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2025-1011

около 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-1011

около 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It ma ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-1010

около 1 года назад

An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2025-1010

около 1 года назад

An attacker could have caused a use-after-free via the Custom Highligh ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2025-1009

около 1 года назад

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2025-1009

около 1 года назад

An attacker could have caused a use-after-free via crafted XSLT data, ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2025-1013

около 1 года назад

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-1013

A race condition could have led to private browsing tabs being opened ...

CVSS3: 6.5
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-1012

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 7.5
1%
Низкий
около 1 года назад
debian логотип
CVE-2025-1012

A race during concurrent delazification could have led to a use-after- ...

CVSS3: 7.5
1%
Низкий
около 1 года назад
nvd логотип
CVE-2025-1011

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-1011

A bug in WebAssembly code generation could have lead to a crash. It ma ...

CVSS3: 8.8
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-1010

An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
1%
Низкий
около 1 года назад
debian логотип
CVE-2025-1010

An attacker could have caused a use-after-free via the Custom Highligh ...

CVSS3: 8.8
1%
Низкий
около 1 года назад
nvd логотип
CVE-2025-1009

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 9.8
1%
Низкий
около 1 года назад
debian логотип
CVE-2025-1009

An attacker could have caused a use-after-free via crafted XSLT data, ...

CVSS3: 9.8
1%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-1013

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 6.5
0%
Низкий
около 1 года назад

Уязвимостей на страницу


Поделиться