Поиск уязвимостей
Количество 29
Количество 29
BDU:2025-06662
Уязвимость компонента Update Handler браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, позволяющая нарушителю повысить свои привилегии
ROS-20250710-03
Уязвимость Firefox
ALT-PU-2025-6254
ALT-PU-2025-6254: package `firefox-esr` update to version 128.10.0-alt1
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVE-2025-2817
Thunderbird's update mechanism allowed a medium-integrity user process ...
ALT-PU-2025-7022
ALT-PU-2025-7022: package `firefox-esr` update to version 128.10.0-alt1
ALT-PU-2025-6478
ALT-PU-2025-6478: package `thunderbird` update to version 138.0-alt2
SUSE-SU-2025:1414-1
Security update for MozillaFirefox
GHSA-j657-7g4v-wv6h
Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10.
ALT-PU-2025-6353
ALT-PU-2025-6353: package `firefox` update to version 138.0.1-alt1
ALT-PU-2025-7697
ALT-PU-2025-7697: package `firefox` update to version 138.0.1-alt0.p10.1
ALT-PU-2025-7695
ALT-PU-2025-7695: package `thunderbird` update to version 138.0-alt1.p10.1
RLSA-2025:7428
Important: firefox security update
RLSA-2025:4797
Important: thunderbird security update
RLSA-2025:4460
Important: thunderbird security update
RLSA-2025:4458
Important: firefox security update
RLSA-2025:4443
Important: firefox security update
ELSA-2025-7506
ELSA-2025-7506: firefox security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-06662 Уязвимость компонента Update Handler браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, позволяющая нарушителю повысить свои привилегии | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
 | ROS-20250710-03 Уязвимость Firefox | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-6254 ALT-PU-2025-6254: package `firefox-esr` update to version 128.10.0-alt1 | CVSS3: 9.1 | больше 1 года назад | |
 | CVE-2025-2817 Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
 | CVE-2025-2817 Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10. | CVSS3: 8.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-2817 Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| CVE-2025-2817 Thunderbird's update mechanism allowed a medium-integrity user process ... | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-7022 ALT-PU-2025-7022: package `firefox-esr` update to version 128.10.0-alt1 | CVSS3: 9.1 | больше 1 года назад | |
| ALT-PU-2025-6478 ALT-PU-2025-6478: package `thunderbird` update to version 138.0-alt2 | CVSS3: 9.1 | больше 1 года назад | |
 | SUSE-SU-2025:1414-1 Security update for MozillaFirefox | 1% Низкий | больше 1 года назад | |
| GHSA-j657-7g4v-wv6h Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| ALT-PU-2025-6353 ALT-PU-2025-6353: package `firefox` update to version 138.0.1-alt1 | CVSS3: 10 | больше 1 года назад | |
| ALT-PU-2025-7697 ALT-PU-2025-7697: package `firefox` update to version 138.0.1-alt0.p10.1 | CVSS3: 10 | больше 1 года назад | |
| ALT-PU-2025-7695 ALT-PU-2025-7695: package `thunderbird` update to version 138.0-alt1.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
 | RLSA-2025:7428 Important: firefox security update | больше 1 года назад | ||
| RLSA-2025:4797 Important: thunderbird security update | больше 1 года назад | ||
| RLSA-2025:4460 Important: thunderbird security update | больше 1 года назад | ||
| RLSA-2025:4458 Important: firefox security update | больше 1 года назад | ||
| RLSA-2025:4443 Important: firefox security update | больше 1 года назад | ||
| ELSA-2025-7506 ELSA-2025-7506: firefox security update (IMPORTANT) | больше 1 года назад |
Уязвимостей на страницу