Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

128129130131132133134135136137138139202420252026

Недавние уязвимости Mozilla Firefox

Количество 14 600

debian логотип

CVE-2025-3031

3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a J ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-3031

3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-3030

3 месяца назад

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ES ...

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2025-3030

3 месяца назад

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2025-3029

3 месяца назад

A crafted URL containing specific Unicode characters could have hidden ...

CVSS3: 7.3
EPSS: Низкий
nvd логотип

CVE-2025-3029

3 месяца назад

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2025-3028

3 месяца назад

JavaScript code running while transforming a document with the XSLTPro ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-3028

3 месяца назад

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-3031

3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-3028

3 месяца назад

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-3031

An attacker could read 32 bits of values spilled onto the stack in a J ...

CVSS3: 6.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-3031

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-3030

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ES ...

CVSS3: 8.1
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-3030

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 8.1
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-3029

A crafted URL containing specific Unicode characters could have hidden ...

CVSS3: 7.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-3029

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 7.3
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-3028

JavaScript code running while transforming a document with the XSLTPro ...

CVSS3: 6.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-3028

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 6.5
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2025-3031

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2025-3028

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 6.5
0%
Низкий
3 месяца назад

Уязвимостей на страницу


Поделиться