| CVE-2025-13020 |
Use-after-free in the WebRTC: Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13027 |
Memory safety bugs present in Firefox 144 and Thunderbird 144
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13019 |
Same-origin policy bypass in the DOM: Workers component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13018 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13017 |
Same-origin policy bypass in the DOM: Notifications component
|
8.1
High
|
Nov 11, 2025 |
| CVE-2025-13025 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-13026 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13024 |
JIT miscompilation in the JavaScript Engine: JIT component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13016 |
Incorrect boundary conditions in the JavaScript: WebAssembly component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-13023 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13022 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13021 |
Incorrect boundary conditions in the Graphics: WebGPU component
|
9.8
Critical
|
Nov 11, 2025 |
| CVE-2025-13015 |
Spoofing issue in Firefox
|
3.4
Low
|
Nov 11, 2025 |
| CVE-2025-13014 |
Use-after-free in the Audio/Video component
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-13013 |
Mitigation bypass in the DOM: Core & HTML component
|
6.1
Medium
|
Nov 11, 2025 |
| CVE-2025-13012 |
Race condition in the Graphics component
|
7.5
High
|
Nov 11, 2025 |
| CVE-2025-11721 |
Memory safety bug present in Firefox 143 and Thunderbird 143
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11719 |
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11716 |
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11715 |
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11708 |
Use-after-free in MediaTrackGraphImpl::GetInstance()
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-11713 |
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected…
|
8.1
High
|
Oct 14, 2025 |
| CVE-2025-11712 |
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when…
|
6.1
Medium
|
Oct 14, 2025 |
| CVE-2025-11711 |
There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-11710 |
A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks…
|
9.8
Critical
|
Oct 14, 2025 |