Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2025-1935
A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1934
It was possible to interrupt the processing of a RegExp bailout and ru ...
CVE-2025-1934
It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1933
On 64-bit CPUs, when the JIT compiles WASM i32 return values they can ...
CVE-2025-1933
On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1932
An inconsistent comparator in xslt/txNodeSorter could have resulted in ...
CVE-2025-1932
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1931
It was possible to cause a use-after-free in the content process side ...
CVE-2025-1931
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
CVE-2025-1930
On Windows, a compromised content process could use bad StreamData sen ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2025-1935 A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| CVE-2025-1934 It was possible to interrupt the processing of a RegExp bailout and ru ... | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-1934 It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-1933 On 64-bit CPUs, when the JIT compiles WASM i32 return values they can ... | CVSS3: 7.6 | 0% Низкий | больше 1 года назад |
| CVE-2025-1933 On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. | CVSS3: 7.6 | 0% Низкий | больше 1 года назад |
| CVE-2025-1932 An inconsistent comparator in xslt/txNodeSorter could have resulted in ... | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
| CVE-2025-1932 An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
| CVE-2025-1931 It was possible to cause a use-after-free in the content process side ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-1931 It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-1930 On Windows, a compromised content process could use bad StreamData sen ... | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу