Поиск уязвимостей

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

ALT Linux

Количество 18 439

CVE-2026-106016

около 1 месяца назад

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.

CVSS3: 6.5

EPSS: Низкий

CVE-2026-106016

около 1 месяца назад

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.

CVSS3: 9.8

EPSS: Низкий

CVE-2026-106016

около 1 месяца назад

Mitigation bypass in the File Handling component. This vulnerability w ...

CVSS3: 9.8

EPSS: Низкий

CVE-2025-9186

около 1 года назад

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

CVSS3: 6.5

EPSS: Низкий

CVE-2025-9186

около 1 года назад

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

CVSS3: 6.5

EPSS: Низкий

CVE-2025-9186

около 1 года назад

Spoofing issue in the Address Bar component of Firefox Focus for Andro ...

CVSS3: 6.5

EPSS: Низкий

CVE-2025-9183

около 1 года назад

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

CVSS3: 6.5

EPSS: Низкий

CVE-2025-9183

около 1 года назад

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

CVSS3: 3.4

EPSS: Низкий

CVE-2025-9183

около 1 года назад

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

CVSS3: 6.5

EPSS: Низкий

CVE-2025-9183

около 1 года назад

Spoofing issue in the Address Bar component. This vulnerability was fi ...

CVSS3: 6.5

EPSS: Низкий

CVE-2025-8364

около 1 года назад

A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141.

CVSS3: 4.3

EPSS: Низкий

CVE-2025-8364

около 1 года назад

A crafted URL using a blob: URI could have hidden the true origin of t ...

CVSS3: 4.3

EPSS: Низкий

CVE-2025-8042

около 1 года назад

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability was fixed in Firefox 141.

CVSS3: 9.8

EPSS: Низкий

CVE-2025-8042

около 1 года назад

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability was fixed in Firefox 141.

CVSS3: 9.8

EPSS: Низкий

CVE-2025-8042

около 1 года назад

Firefox for Android allowed a sandboxed iframe without the `allow-down ...

CVSS3: 9.8

EPSS: Низкий

CVE-2025-8041

около 1 года назад

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.

CVSS3: 5.3

EPSS: Низкий

CVE-2025-8041

около 1 года назад

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.

CVSS3: 5.3

EPSS: Низкий

CVE-2025-8041

около 1 года назад

In the address bar, Firefox for Android truncated the display of URLs ...

CVSS3: 5.3

EPSS: Низкий

CVE-2025-6434

больше 1 года назад

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

CVSS3: 4.3

EPSS: Низкий

CVE-2025-6434

больше 1 года назад

CVSS3: 3.4

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.	CVSS3: 6.5	0% Низкий	около 1 месяца назад
CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.	CVSS3: 9.8	0% Низкий	около 1 месяца назад
CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability w ...	CVSS3: 9.8	0% Низкий	около 1 месяца назад
CVE-2025-9186 Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-9186 Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-9186 Spoofing issue in the Address Bar component of Firefox Focus for Andro ...	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-9183 Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-9183 Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.	CVSS3: 3.4	0% Низкий	около 1 года назад
CVE-2025-9183 Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-9183 Spoofing issue in the Address Bar component. This vulnerability was fi ...	CVSS3: 6.5	0% Низкий	около 1 года назад
CVE-2025-8364 A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 141.	CVSS3: 4.3	0% Низкий	около 1 года назад
CVE-2025-8364 A crafted URL using a blob: URI could have hidden the true origin of t ...	CVSS3: 4.3	0% Низкий	около 1 года назад
CVE-2025-8042 Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability was fixed in Firefox 141.	CVSS3: 9.8	0% Низкий	около 1 года назад
CVE-2025-8042 Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability was fixed in Firefox 141.	CVSS3: 9.8	0% Низкий	около 1 года назад
CVE-2025-8042 Firefox for Android allowed a sandboxed iframe without the `allow-down ...	CVSS3: 9.8	0% Низкий	около 1 года назад
CVE-2025-8041 In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.	CVSS3: 5.3	0% Низкий	около 1 года назад
CVE-2025-8041 In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.	CVSS3: 5.3	0% Низкий	около 1 года назад
CVE-2025-8041 In the address bar, Firefox for Android truncated the display of URLs ...	CVSS3: 5.3	0% Низкий	около 1 года назад
CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.	CVSS3: 4.3	0% Низкий	больше 1 года назад
CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.	CVSS3: 3.4	0% Низкий	больше 1 года назад

Уязвимостей на страницу