Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 304
CVE-2025-9183
Spoofing issue in the Address Bar component. This vulnerability was fi ...
CVE-2025-9182
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.
CVE-2025-9182
Denial-of-service due to out-of-memory in the Graphics: WebRender comp ...
CVE-2025-9181
Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
CVE-2025-9181
Uninitialized memory in the JavaScript Engine component. This vulnerab ...
CVE-2025-9180
Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
CVE-2025-9180
Same-origin policy bypass in the Graphics: Canvas2D component. This vu ...
CVE-2025-9179
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.
CVE-2025-9179
An attacker was able to perform memory corruption in the GMP process w ...
CVE-2025-8364
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2025-9183 Spoofing issue in the Address Bar component. This vulnerability was fi ... | CVSS3: 6.5 | 0% Низкий | 12 месяцев назад |
 | CVE-2025-9182 Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2. | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9182 Denial-of-service due to out-of-memory in the Graphics: WebRender comp ... | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9181 Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2. | CVSS3: 6.5 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9181 Uninitialized memory in the JavaScript Engine component. This vulnerab ... | CVSS3: 6.5 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9180 Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2. | CVSS3: 8.1 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9180 Same-origin policy bypass in the Graphics: Canvas2D component. This vu ... | CVSS3: 8.1 | 0% Низкий | 12 месяцев назад |
| CVE-2025-9179 An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2. | CVSS3: 9.8 | 1% Низкий | 12 месяцев назад |
| CVE-2025-9179 An attacker was able to perform memory corruption in the GMP process w ... | CVSS3: 9.8 | 1% Низкий | 12 месяцев назад |
| CVE-2025-8364 A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141. | CVSS3: 4.3 | 0% Низкий | 12 месяцев назад |
Уязвимостей на страницу