Поиск уязвимостей
Количество 6
Количество 6
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature on ...
GHSA-wjv8-8vf9-mrv8
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144.
BDU:2025-14553
Уязвимость пользовательского интерфейса браузеров Mozilla Firefox и Firefox Focus, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
ALT-PU-2025-13476
ALT-PU-2025-13476: package `firefox` update to version 144.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144. | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144. | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
| CVE-2025-11720 The Firefox and Firefox Focus UI for the Android custom tab feature on ... | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
| GHSA-wjv8-8vf9-mrv8 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox < 144. | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
 | BDU:2025-14553 Уязвимость пользовательского интерфейса браузеров Mozilla Firefox и Firefox Focus, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
| ALT-PU-2025-13476 ALT-PU-2025-13476: package `firefox` update to version 144.0-alt1 | CVSS3: 9.8 | около 1 года назад |
Уязвимостей на страницу