Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18 439

Количество 18 439

nvd логотип

CVE-2025-13012

12 месяцев назад

Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-13012

12 месяцев назад

Race condition in the Graphics component. This vulnerability was fixed ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-12380

около 1 года назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2025-12380

около 1 года назад

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2025-12380

около 1 года назад

Starting with Firefox 142, it was possible for a compromised child pro ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2025-11720

около 1 года назад

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2025-11720

около 1 года назад

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2025-11720

около 1 года назад

The Firefox and Firefox Focus UI for the Android custom tab feature on ...

CVSS3: 8.1
EPSS: Низкий
ubuntu логотип

CVE-2025-11718

около 1 года назад

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-11718

около 1 года назад

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-11718

около 1 года назад

When the address bar was hidden due to scrolling on Android, a malicio ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-11717

около 1 года назад

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2025-11717

около 1 года назад

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2025-11717

около 1 года назад

When switching between Android apps using the card carousel Firefox sh ...

CVSS3: 9.1
EPSS: Низкий
ubuntu логотип

CVE-2025-11153

около 1 года назад

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2025-11153

около 1 года назад

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

EPSS: Низкий
nvd логотип

CVE-2025-11153

около 1 года назад

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-11153

около 1 года назад

JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-11152

около 1 года назад

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 8.6
EPSS: Низкий
nvd логотип

CVE-2025-11152

около 1 года назад

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 8.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-13012

Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

CVSS3: 7.5
0%
Низкий
12 месяцев назад
debian логотип
CVE-2025-13012

Race condition in the Graphics component. This vulnerability was fixed ...

CVSS3: 7.5
0%
Низкий
12 месяцев назад
ubuntu логотип
CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

CVSS3: 9.8
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child pro ...

CVSS3: 9.8
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.

CVSS3: 8.1
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.

CVSS3: 8.1
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature on ...

CVSS3: 8.1
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-11718

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

CVSS3: 6.5
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-11718

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

CVSS3: 6.5
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-11718

When the address bar was hidden due to scrolling on Android, a malicio ...

CVSS3: 6.5
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-11717

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

CVSS3: 9.1
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-11717

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

CVSS3: 9.1
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-11717

When switching between Android apps using the card carousel Firefox sh ...

CVSS3: 9.1
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 7.5
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 7.5
0%
Низкий
около 1 года назад
debian логотип
CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...

CVSS3: 7.5
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 8.6
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

CVSS3: 8.6
0%
Низкий
около 1 года назад

Уязвимостей на страницу