| CVE-2025-1938 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
|
6.5
Medium
|
Mar 4, 2025 |
| CVE-2025-1943 |
Memory safety bugs present in Firefox 135 and Thunderbird 135
|
8.2
High
|
Mar 4, 2025 |
| CVE-2025-1937 |
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7
|
7.5
High
|
Mar 4, 2025 |
| CVE-2025-1936 |
jar: URLs retrieve local file content packaged in a ZIP archive
|
7.3
High
|
Mar 4, 2025 |
| CVE-2025-1942 |
When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into…
|
9.8
Critical
|
Mar 4, 2025 |
| CVE-2025-1941 |
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been…
|
9.1
Critical
|
Mar 4, 2025 |
| CVE-2025-1935 |
A web page could trick a user into setting that site as the default handler for a custom URL protocol
|
4.3
Medium
|
Mar 4, 2025 |
| CVE-2025-1940 |
A select option could partially obscure the confirmation prompt shown before launching external apps
|
7.1
High
|
Mar 4, 2025 |
| CVE-2025-1934 |
It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering…
|
6.5
Medium
|
Mar 4, 2025 |
| CVE-2025-1932 |
An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access
|
8.1
High
|
Mar 4, 2025 |
| CVE-2025-1931 |
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a…
|
7.5
High
|
Mar 4, 2025 |
| CVE-2025-1933 |
On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory
|
7.6
High
|
Mar 4, 2025 |
| CVE-2025-1939 |
Android apps can load web pages using the Custom Tabs feature
|
3.9
Low
|
Mar 4, 2025 |
| CVE-2025-1930 |
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the…
|
8.8
High
|
Mar 4, 2025 |
| CVE-2025-1414 |
Memory safety bugs present in Firefox 135
|
6.5
Medium
|
Feb 18, 2025 |
| CVE-2025-1020 |
Memory safety bugs present in Firefox 134 and Thunderbird 134
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1017 |
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1016 |
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19,…
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1014 |
Certificate length was not properly checked when added to a certificate store
|
8.8
High
|
Feb 4, 2025 |
| CVE-2025-1013 |
A race condition could have led to private browsing tabs being opened in normal browsing windows
|
6.5
Medium
|
Feb 4, 2025 |
| CVE-2025-1019 |
The z-order of the browser windows could be manipulated to hide the fullscreen notification
|
4.3
Medium
|
Feb 4, 2025 |
| CVE-2025-1012 |
A race during concurrent delazification could have led to a use-after-free
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1011 |
A bug in WebAssembly code generation could have lead to a crash
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1010 |
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash
|
9.8
Critical
|
Feb 4, 2025 |
| CVE-2025-1018 |
The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user
|
7.3
High
|
Feb 4, 2025 |