Thu, Mar 27 · 02:15 PM CDTCVE-2025-2857
10.0/10 · Must read/watchNVDvuln
Summary
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the
CVECVE-2025-2857
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 27 · 02:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-48106
10.0/10 · Must read/watchNVDvuln
Summary
Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora allows Using Malicious Files.This issue affects Clanora: from n/a through < 1.3.1.
CVECVE-2025-48106
SeverityCRITICAL
TypeUPDATED
PublishedWed, Oct 22 · 03:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-34267
9.9/10 · Must read/watchNVDvuln
Summary
Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or
CVECVE-2025-34267
SeverityCRITICAL
TypeUPDATED
PublishedTue, Oct 14 · 08:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-0247
9.8/10 · Must read/watchNVDvuln
Summary
Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134 and Thunderbird 134.
CVECVE-2025-0247
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jan 07 · 04:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1009
9.8/10 · Must read/watchNVDvuln
Summary
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
CVECVE-2025-1009
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1016
9.8/10 · Must read/watchNVDvuln
Summary
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability w
CVECVE-2025-1016
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1017
9.8/10 · Must read/watchNVDvuln
Summary
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 128
CVECVE-2025-1017
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1020
9.8/10 · Must read/watchNVDvuln
Summary
Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
CVECVE-2025-1020
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1942
9.8/10 · Must read/watchNVDvuln
Summary
When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.
CVECVE-2025-1942
SeverityCRITICAL
TypeUPDATED
PublishedTue, Mar 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-49710
9.8/10 · Must read/watchNVDvuln
Summary
An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.
CVECVE-2025-49710
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 11 · 12:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-54143
9.8/10 · Must read/watchNVDvuln
Summary
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.
CVECVE-2025-54143
SeverityCRITICAL
TypeUPDATED
PublishedTue, Aug 19 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-6424
9.8/10 · Must read/watchNVDvuln
Summary
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.
CVECVE-2025-6424
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jun 24 · 01:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-6544
9.8/10 · Must read/watchNVDvuln
Summary
A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL enco
CVECVE-2025-6544
SeverityCRITICAL
TypeUPDATED
PublishedSun, Sep 21 · 09:15 AM CDT
ModifiedMon, Oct 05 · 02:10 PM CDT
CVE-2025-8028
9.8/10 · Must read/watchNVDvuln
Summary
On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbir
CVECVE-2025-8028
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jul 22 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-8031
9.8/10 · Must read/watchNVDvuln
Summary
The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
CVECVE-2025-8031
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jul 22 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-8038
9.8/10 · Must read/watchNVDvuln
Summary
Thunderbird ignored paths when checking the validity of navigations in a frame. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
CVECVE-2025-8038
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jul 22 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-9179
9.8/10 · Must read/watchNVDvuln
Summary
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thu
CVECVE-2025-9179
SeverityCRITICAL
TypeUPDATED
PublishedTue, Aug 19 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-11717
9.1/10 · Must read/watchNVDvuln
Summary
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.
CVECVE-2025-11717
SeverityCRITICAL
TypeUPDATED
PublishedTue, Oct 14 · 01:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1941
9.1/10 · Must read/watchNVDvuln
Summary
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245). This vulnerability was fixed in Firefox 136.
CVECVE-2025-1941
SeverityCRITICAL
TypeUPDATED
PublishedTue, Mar 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-4083
9.1/10 · Must read/watchNVDvuln
Summary
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR
CVECVE-2025-4083
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 29 · 02:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-54145
9.1/10 · Must read/watchNVDvuln
Summary
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141.
CVECVE-2025-54145
SeverityCRITICAL
TypeUPDATED
PublishedTue, Aug 19 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-8037
9.1/10 · Must read/watchNVDvuln
Summary
Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
CVECVE-2025-8037
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jul 22 · 09:15 PM CDT
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1010
8.8/10 · Worth your timeNVDvuln
Summary
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
CVECVE-2025-1010
SeverityHIGH
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1011
8.8/10 · Worth your timeNVDvuln
Summary
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
CVECVE-2025-1011
SeverityHIGH
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
CVE-2025-1014
8.8/10 · Worth your timeNVDvuln
Summary
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
CVECVE-2025-1014
SeverityHIGH
TypeUPDATED
PublishedTue, Feb 04 · 02:15 PM CST
ModifiedMon, Oct 05 · 03:10 PM CDT
