| CVE-2025-8039 |
In some cases search terms persisted in the URL bar even after navigating away from the search page
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8032 |
XSLT document loading did not correctly propagate the source document which bypassed its CSP
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8031 |
The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic…
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8038 |
Thunderbird ignored paths when checking the validity of navigations in a frame
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8036 |
Thunderbird cached CORS preflight responses across IP address changes
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8030 |
Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing…
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8037 |
Setting a nameless cookie with an equals sign in the value shadowed other cookies
|
9.1
Critique
|
22 juil. 2025 |
| CVE-2025-8029 |
Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags
|
8.1
Élevée
|
22 juil. 2025 |
| CVE-2025-8028 |
On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction…
|
9.8
Critique
|
22 juil. 2025 |
| CVE-2025-8027 |
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack
|
6.5
Moyenne
|
22 juil. 2025 |
| CVE-2025-6436 |
Memory safety bugs present in Firefox 139 and Thunderbird 139
|
8.1
Élevée
|
24 juin 2025 |
| CVE-2025-6435 |
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not…
|
8.1
Élevée
|
24 juin 2025 |
| CVE-2025-6434 |
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an…
|
4.3
Moyenne
|
24 juin 2025 |
| CVE-2025-6433 |
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a…
|
9.8
Critique
|
24 juin 2025 |
| CVE-2025-6432 |
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was…
|
8.6
Élevée
|
24 juin 2025 |
| CVE-2025-6427 |
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments
|
9.1
Critique
|
24 juin 2025 |
| CVE-2025-6430 |
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file…
|
6.1
Moyenne
|
24 juin 2025 |
| CVE-2025-6426 |
The executable file warning did not warn users before opening files with the `terminal` extension
|
8.8
Élevée
|
24 juin 2025 |
| CVE-2025-6429 |
Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in…
|
6.5
Moyenne
|
24 juin 2025 |
| CVE-2025-6425 |
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that…
|
4.3
Moyenne
|
24 juin 2025 |
| CVE-2025-6424 |
A use-after-free in FontFaceSet resulted in a potentially exploitable crash
|
9.8
Critique
|
24 juin 2025 |
| CVE-2025-5986 |
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's…
|
6.5
Moyenne
|
11 juin 2025 |
| CVE-2025-5272 |
Memory safety bugs present in Firefox 138 and Thunderbird 138
|
7.3
Élevée
|
27 mai 2025 |
| CVE-2025-5271 |
Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks
|
6.5
Moyenne
|
27 mai 2025 |
| CVE-2025-5270 |
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled
|
7.5
Élevée
|
27 mai 2025 |