| CVE-2025-14322 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
8.0
High
|
Dec 9, 2025 |
| CVE-2025-14321 |
Use-after-free in the WebRTC: Signaling component
|
9.8
Critical
|
Dec 9, 2025 |
| CVE-2025-13020 |
Use-after-free in the WebRTC: Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13019 |
Same-origin policy bypass in the DOM: Workers component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13018 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13017 |
Same-origin policy bypass in the DOM: Notifications component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13016 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-13015 |
Spoofing issue in Firefox
|
3.4
Low
|
Nov 11, 2025 |
| CVE-2025-13014 |
Use-after-free in the Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13013 |
Mitigation bypass in the DOM: Core & HTML component
|
6.1
Medium
|
Nov 11, 2025 |
| CVE-2025-13012 |
Race condition in the Graphics component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-11715 |
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11708 |
Use-after-free in MediaTrackGraphImpl::GetInstance()
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11713 |
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected…
|
8.1
High
|
Oct 14, 2025 |
| CVE-2025-11712 |
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when…
|
6.1
Medium
|
Oct 14, 2025 |
| CVE-2025-11711 |
There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11710 |
A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11714 |
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and…
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11709 |
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-10537 |
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
|
8.8
High
|
Sep 16, 2025 |
| CVE-2025-10536 |
Information disclosure in the Networking: Cache component
|
6.2
Medium
|
Sep 16, 2025 |
| CVE-2025-10532 |
Incorrect boundary conditions in the JavaScript: GC component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10529 |
Same-origin policy bypass in the Layout component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10528 |
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
|
7.3
High
|
Sep 16, 2025 |
| CVE-2025-10527 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
7.1
High
|
Sep 16, 2025 |