| CVE-2025-11714 |
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and…
|
8.8
High
|
Oct 14, 2025 |
| CVE-2025-11709 |
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using…
|
9.8
Critical
|
Oct 14, 2025 |
| CVE-2025-10534 |
Spoofing issue in the Site Permissions component
|
8.1
High
|
Sep 16, 2025 |
| CVE-2025-10531 |
Mitigation bypass in the Web Compatibility: Tooling component
|
5.4
Medium
|
Sep 16, 2025 |
| CVE-2025-10537 |
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
|
8.8
High
|
Sep 16, 2025 |
| CVE-2025-10530 |
Spoofing issue in the WebAuthn component in Firefox for Android
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10536 |
Information disclosure in the Networking: Cache component
|
6.2
Medium
|
Sep 16, 2025 |
| CVE-2025-10532 |
Incorrect boundary conditions in the JavaScript: GC component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10529 |
Same-origin policy bypass in the Layout component
|
6.5
Medium
|
Sep 16, 2025 |
| CVE-2025-10528 |
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
|
7.3
High
|
Sep 16, 2025 |
| CVE-2025-10527 |
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
|
7.1
High
|
Sep 16, 2025 |
| CVE-2025-10533 |
Integer overflow in the SVG component
|
8.8
High
|
Sep 16, 2025 |
| CVE-2025-9184 |
Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
|
8.1
High
|
Aug 19, 2025 |
| CVE-2025-9187 |
Memory safety bugs present in Firefox 141 and Thunderbird 141
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2025-9182 |
Denial-of-service due to out-of-memory in the Graphics: WebRender component
|
7.5
High
|
Aug 19, 2025 |
| CVE-2025-9181 |
Uninitialized memory in the JavaScript Engine component
|
6.5
Medium
|
Aug 19, 2025 |
| CVE-2025-9185 |
Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,…
|
8.1
High
|
Aug 19, 2025 |
| CVE-2025-9180 |
Same-origin policy bypass in the Graphics: Canvas2D component
|
8.1
High
|
Aug 19, 2025 |
| CVE-2025-9179 |
An attacker was able to perform memory corruption in the GMP process which processes encrypted media
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2025-8044 |
Memory safety bugs present in Firefox 140 and Thunderbird 140
|
9.8
Critical
|
Jul 22, 2025 |
| CVE-2025-8035 |
Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0,…
|
8.8
High
|
Jul 22, 2025 |
| CVE-2025-8043 |
Focus incorrectly truncated URLs towards the beginning instead of around the origin
|
9.8
Critical
|
Jul 22, 2025 |
| CVE-2025-8040 |
Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140
|
8.8
High
|
Jul 22, 2025 |
| CVE-2025-8034 |
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0,…
|
8.8
High
|
Jul 22, 2025 |
| CVE-2025-8033 |
The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr…
|
6.5
Medium
|
Jul 22, 2025 |