Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 304
CVE-2025-4093
Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. ...
CVE-2025-4092
Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVE-2025-4092
Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of ...
CVE-2025-4091
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.
CVE-2025-4091
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ES ...
CVE-2025-4090
A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVE-2025-4090
A vulnerability existed in Thunderbird for Android where potentially s ...
CVE-2025-4089
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVE-2025-4089
Due to insufficient escaping of special characters in the "copy as cUR ...
CVE-2025-4088
A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2025-4093 Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. ... | CVSS3: 8.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-4092 Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-4092 Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of ... | CVSS3: 6.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-4091 Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10. | CVSS3: 8.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-4091 Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ES ... | CVSS3: 8.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-4090 A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-4090 A vulnerability existed in Thunderbird for Android where potentially s ... | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-4089 Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138. | CVSS3: 5.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-4089 Due to insufficient escaping of special characters in the "copy as cUR ... | CVSS3: 5.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-4088 A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу