Поиск уязвимостей
Количество 18 439
Количество 18 439
CVE-2025-13012
Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.
CVE-2025-13012
Race condition in the Graphics component. This vulnerability was fixed ...
CVE-2025-12380
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.
CVE-2025-12380
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.
CVE-2025-12380
Starting with Firefox 142, it was possible for a compromised child pro ...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature on ...
CVE-2025-11718
When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.
CVE-2025-11718
When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.
CVE-2025-11718
When the address bar was hidden due to scrolling on Android, a malicio ...
CVE-2025-11717
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.
CVE-2025-11717
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.
CVE-2025-11717
When switching between Android apps using the card carousel Firefox sh ...
CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.
CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.
CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.
CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...
CVE-2025-11152
Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.
CVE-2025-11152
Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-13012 Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5. | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад | |
CVE-2025-13012 Race condition in the Graphics component. This vulnerability was fixed ... | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад | |
CVE-2025-12380 Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2. | CVSS3: 9.8 | 0% Низкий | около 1 года назад | |
CVE-2025-12380 Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2. | CVSS3: 9.8 | 0% Низкий | около 1 года назад | |
CVE-2025-12380 Starting with Firefox 142, it was possible for a compromised child pro ... | CVSS3: 9.8 | 0% Низкий | около 1 года назад | |
CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144. | CVSS3: 8.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144. | CVSS3: 8.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature on ... | CVSS3: 8.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11718 When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11718 When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11718 When the address bar was hidden due to scrolling on Android, a malicio ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11717 When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144. | CVSS3: 9.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11717 When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144. | CVSS3: 9.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11717 When switching between Android apps using the card carousel Firefox sh ... | CVSS3: 9.1 | 0% Низкий | около 1 года назад | |
CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3. | CVSS3: 7.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3. | 0% Низкий | около 1 года назад | ||
CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3. | CVSS3: 7.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11153 JIT miscompilation in the JavaScript Engine: JIT component. This vulne ... | CVSS3: 7.5 | 0% Низкий | около 1 года назад | |
CVE-2025-11152 Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. | CVSS3: 8.6 | 0% Низкий | около 1 года назад | |
CVE-2025-11152 Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. | CVSS3: 8.6 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу