NVD · CISA KEV · CERT-In
CVE Tracker
Vulnerabilities ranked for Indian enterprises. Filter by severity, exploitation status and CERT-In advisories; sign in for WhatsApp/email alerts on your product stack.
8.8CVE-2025-8040Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.Firefox8.8CVE-2025-8035Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird…Firefox8.8CVE-2025-8034Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR…Firefox8.8CVE-2025-6426The executable file warning did not warn users before opening files with the `terminal` extension.Firefox8.8CVE-2025-4919An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array…Firefox8.8CVE-2025-2817Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level…Firefox8.8CVE-2025-1930On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a…Firefox8.8CVE-2025-1014Certificate length was not properly checked when added to a certificate store.Firefox8.8CVE-2025-1011A bug in WebAssembly code generation could have lead to a crash.Firefox8.8CVE-2025-1010An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially…Firefox8.6CVE-2025-6432When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain…Firefox8.1CVE-2025-9185Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR…Firefox8.1CVE-2025-9184Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.Firefox8.1CVE-2025-9180Same-origin policy bypass in the Graphics: Canvas2D component.Firefox8.1CVE-2025-8039In some cases search terms persisted in the URL bar even after navigating away from the search page.Firefox8.1CVE-2025-8036Thunderbird cached CORS preflight responses across IP address changes.Firefox8.1CVE-2025-8032XSLT document loading did not correctly propagate the source document which bypassed its CSP.Firefox8.1CVE-2025-8030Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into…Firefox8.1CVE-2025-8029Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags.Firefox8.1CVE-2025-6436Memory safety bugs present in Firefox 139 and Thunderbird 139.Firefox8.1CVE-2025-6435If a user saved a response from the Network tab in Devtools using the Save As context menu option, that…Firefox8.1CVE-2025-5269Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10.Firefox8.1CVE-2025-5268Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.Firefox8.1CVE-2025-4093Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9.Firefox8.1CVE-2025-4091Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9.Firefox8.1CVE-2025-3034Memory safety bugs present in Firefox 136 and Thunderbird 136.Firefox8.1CVE-2025-3030Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8.Firefox8.1CVE-2025-1932An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable…Firefox7.7CVE-2025-3033After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be…Firefox7.7CVE-2025-0241When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially…Firefox7.6CVE-2025-1933On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory.Firefox7.5CVE-2025-10535Information disclosure, mitigation bypass in the Privacy component in Firefox for Android.Firefox7.5CVE-2025-9182Denial-of-service due to out-of-memory in the Graphics: WebRender component.Firefox7.5CVE-2025-55029Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of…Firefox7.5CVE-2025-5270In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled.Firefox7.5CVE-2025-1937Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and…Firefox7.5CVE-2025-1931It was possible to cause a use-after-free in the content process side of a WebTransport connection,…Firefox7.5CVE-2025-1012A race during concurrent delazification could have led to a use-after-free.Firefox7.4CVE-2025-3032Leaking of file descriptors from the fork server to web content processes could allow for privilege…Firefox7.3CVE-2025-5272Memory safety bugs present in Firefox 138 and Thunderbird 138.Firefox7.3CVE-2025-3029A crafted URL containing specific Unicode characters could have hidden the true origin of the page,…Firefox7.3CVE-2025-1936jar: URLs retrieve local file content packaged in a ZIP archive.Firefox7.1CVE-2025-4085An attacker with control over a content process could potentially leverage the privileged UITour actor to…Firefox7.1CVE-2025-1940A select option could partially obscure the confirmation prompt shown before launching external apps.Firefox