Поиск уязвимостей
Количество 19
Количество 19
CVE-2025-0237
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.
CVE-2025-0237
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.
CVE-2025-0237
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.
CVE-2025-0237
The WebChannel API, which is used to transport various information acr ...
GHSA-2776-h8x3-vrr7
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134 and Firefox ESR < 128.6.
BDU:2025-03142
Уязвимость интерфейса WebChannel API браузеров Mozilla Firefox, Firefox ESR и почтовых клиентов Thunderbird, Thunderbird ESR, позволяющая нарушителю повысить свои привилегии
SUSE-SU-2025:0080-1
Security update for MozillaThunderbird
SUSE-SU-2025:0059-1
Security update for MozillaFirefox
SUSE-SU-2025:0056-1
Security update for MozillaFirefox
RLSA-2025:0144
Important: firefox security update
ELSA-2025-0144
ELSA-2025-0144: firefox security update (IMPORTANT)
ELSA-2025-0132
ELSA-2025-0132: firefox security update (IMPORTANT)
ELSA-2025-0080
ELSA-2025-0080: firefox security update (IMPORTANT)
ALT-PU-2025-1681
ALT-PU-2025-1681: package `firefox-esr` update to version 128.6.0-alt1
ALT-PU-2025-1154
ALT-PU-2025-1154: package `firefox-esr` update to version 128.6.0-alt1
ALT-PU-2025-1972
ALT-PU-2025-1972: package `thunderbird` update to version 128.6.0-alt1
ALT-PU-2025-1984
ALT-PU-2025-1984: package `firefox` update to version 134.0.2-alt1
ALT-PU-2025-2027
ALT-PU-2025-2027: package `thunderbird` update to version 128.6.0-alt0.p10.1
ALT-PU-2025-2230
ALT-PU-2025-2230: package `firefox` update to version 134.0.2-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-0237 The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. | CVSS3: 5.4 | 1% Низкий | почти 2 года назад |
 | CVE-2025-0237 The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. | CVSS3: 6.8 | 1% Низкий | почти 2 года назад |
 | CVE-2025-0237 The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. | CVSS3: 5.4 | 1% Низкий | почти 2 года назад |
| CVE-2025-0237 The WebChannel API, which is used to transport various information acr ... | CVSS3: 5.4 | 1% Низкий | почти 2 года назад |
| GHSA-2776-h8x3-vrr7 The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134 and Firefox ESR < 128.6. | CVSS3: 5.4 | 1% Низкий | почти 2 года назад |
 | BDU:2025-03142 Уязвимость интерфейса WebChannel API браузеров Mozilla Firefox, Firefox ESR и почтовых клиентов Thunderbird, Thunderbird ESR, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.8 | 1% Низкий | почти 2 года назад |
 | SUSE-SU-2025:0080-1 Security update for MozillaThunderbird | почти 2 года назад | ||
| SUSE-SU-2025:0059-1 Security update for MozillaFirefox | почти 2 года назад | ||
| SUSE-SU-2025:0056-1 Security update for MozillaFirefox | почти 2 года назад | ||
 | RLSA-2025:0144 Important: firefox security update | почти 2 года назад | ||
| ELSA-2025-0144 ELSA-2025-0144: firefox security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2025-0132 ELSA-2025-0132: firefox security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2025-0080 ELSA-2025-0080: firefox security update (IMPORTANT) | почти 2 года назад | ||
| ALT-PU-2025-1681 ALT-PU-2025-1681: package `firefox-esr` update to version 128.6.0-alt1 | CVSS3: 7.7 | почти 2 года назад | |
| ALT-PU-2025-1154 ALT-PU-2025-1154: package `firefox-esr` update to version 128.6.0-alt1 | CVSS3: 7.7 | почти 2 года назад | |
| ALT-PU-2025-1972 ALT-PU-2025-1972: package `thunderbird` update to version 128.6.0-alt1 | CVSS3: 7.7 | почти 2 года назад | |
| ALT-PU-2025-1984 ALT-PU-2025-1984: package `firefox` update to version 134.0.2-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-2027 ALT-PU-2025-2027: package `thunderbird` update to version 128.6.0-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-2230 ALT-PU-2025-2230: package `firefox` update to version 134.0.2-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад |
Уязвимостей на страницу