| CVE-2025-10533 |
Integer overflow in the SVG component
|
8.8
Élevée
|
16 sept. 2025 |
| CVE-2025-9184 |
Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
|
8.1
Élevée
|
19 août 2025 |
| CVE-2025-9183 |
Spoofing issue in the Address Bar component
|
6.5
Moyenne
|
19 août 2025 |
| CVE-2025-9182 |
Denial-of-service due to out-of-memory in the Graphics: WebRender component
|
7.5
Élevée
|
19 août 2025 |
| CVE-2025-9181 |
Uninitialized memory in the JavaScript Engine component
|
6.5
Moyenne
|
19 août 2025 |
| CVE-2025-9185 |
Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,…
|
8.1
Élevée
|
19 août 2025 |
| CVE-2025-9180 |
Same-origin policy bypass in the Graphics: Canvas2D component
|
8.1
Élevée
|
19 août 2025 |
| CVE-2025-9179 |
An attacker was able to perform memory corruption in the GMP process which processes encrypted media
|
9.8
Critique
|
19 août 2025 |
| CVE-2025-8035 |
Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0,…
|
8.8
Élevée
|
22 juil. 2025 |
| CVE-2025-8040 |
Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140
|
8.8
Élevée
|
22 juil. 2025 |
| CVE-2025-8034 |
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0,…
|
8.8
Élevée
|
22 juil. 2025 |
| CVE-2025-8033 |
The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr…
|
6.5
Moyenne
|
22 juil. 2025 |
| CVE-2025-8039 |
In some cases search terms persisted in the URL bar even after navigating away from the search page
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8032 |
XSLT document loading did not correctly propagate the source document which bypassed its CSP
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8031 |
The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic…
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8038 |
Thunderbird ignored paths when checking the validity of navigations in a frame
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8036 |
Thunderbird cached CORS preflight responses across IP address changes
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8030 |
Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing…
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8037 |
Setting a nameless cookie with an equals sign in the value shadowed other cookies
|
9.1
Critique
|
22 juil. 2025 |
| CVE-2025-8029 |
Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8028 |
On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction…
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8027 |
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack
|
6.5
Moyenne
|
22 juil. 2025 |
| CVE-2025-6430 |
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file…
|
6.1
Moyenne
|
24 juin 2025 |
| CVE-2025-6426 |
The executable file warning did not warn users before opening files with the `terminal` extension
|
8.8
Élevée
|
24 juin 2025 |
| CVE-2025-6429 |
Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in…
|
6.5
Moyenne
|
24 juin 2025 |