Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153202320242025202620272028

Релизные элементы

KBВерсияБилдДата доступности
138.0.4138.0.4
138.0.3138.0.3
138.0.1138.0.1
138.0138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 304

debian логотип

CVE-2025-4093

больше 1 года назад

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. ...

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2025-4092

больше 1 года назад

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-4092

больше 1 года назад

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-4091

больше 1 года назад

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2025-4091

больше 1 года назад

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ES ...

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2025-4090

больше 1 года назад

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-4090

больше 1 года назад

A vulnerability existed in Thunderbird for Android where potentially s ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-4089

больше 1 года назад

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 5.1
EPSS: Низкий
debian логотип

CVE-2025-4089

больше 1 года назад

Due to insufficient escaping of special characters in the "copy as cUR ...

CVSS3: 5.1
EPSS: Низкий
nvd логотип

CVE-2025-4088

больше 1 года назад

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. ...

CVSS3: 8.1
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-4092

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 6.5
0%
Низкий
больше 1 года назад
debian логотип
CVE-2025-4092

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of ...

CVSS3: 6.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-4091

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.

CVSS3: 8.1
0%
Низкий
больше 1 года назад
debian логотип
CVE-2025-4091

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ES ...

CVSS3: 8.1
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially s ...

CVSS3: 5.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 5.1
0%
Низкий
больше 1 года назад
debian логотип
CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cUR ...

CVSS3: 5.1
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

CVSS3: 6.5
0%
Низкий
больше 1 года назад

Уязвимостей на страницу


Поделиться