Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
Typedeb
Namespacedebian
Namefirefox-esr
Version128.7.0esr-1~deb12u1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version128.7.0esr-1
Latest_non_vulnerable_version140.11.0esr-1~deb13u1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-1e6u-mg34-z7dt
vulnerability_id VCID-1e6u-mg34-z7dt
summary An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1010.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1010.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1010
reference_id
reference_type
scores
0
value 0.00344
scoring_system epss
scoring_elements 0.57282
published_at 2026-06-06T12:55:00Z
1
value 0.00344
scoring_system epss
scoring_elements 0.57274
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1010
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1010
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1010
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343750
reference_id 2343750
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343750
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
reference_id mfsa2025-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-08/
reference_id mfsa2025-08
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://www.mozilla.org/security/advisories/mfsa2025-08/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
15
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
16
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
17
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
18
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
19
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
20
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
21
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
22
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
23
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
24
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
25
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
26
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
27
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
28
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
29
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
30
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
31
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
32
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
33
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
34
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1936982
reference_id show_bug.cgi?id=1936982
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T18:47:57Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1936982
35
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
36
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1010
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1e6u-mg34-z7dt
1
url VCID-658f-y5df-57c4
vulnerability_id VCID-658f-y5df-57c4
summary Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1014.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1014.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1014
reference_id
reference_type
scores
0
value 0.00212
scoring_system epss
scoring_elements 0.43848
published_at 2026-06-06T12:55:00Z
1
value 0.00212
scoring_system epss
scoring_elements 0.43839
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1014
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1014
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1014
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343764
reference_id 2343764
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343764
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T20:58:58Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T20:58:58Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T20:58:58Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T20:58:58Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
13
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
14
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
15
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
16
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
17
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
18
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
19
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
20
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
21
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
22
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
23
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
24
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
25
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
26
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
27
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
28
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
29
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
30
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
31
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
32
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1940804
reference_id show_bug.cgi?id=1940804
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T20:58:58Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1940804
33
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
34
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1014
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-658f-y5df-57c4
2
url VCID-7321-q5ca-e3g7
vulnerability_id VCID-7321-q5ca-e3g7
summary A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1013.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1013.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1013
reference_id
reference_type
scores
0
value 0.0025
scoring_system epss
scoring_elements 0.48456
published_at 2026-06-06T12:55:00Z
1
value 0.0025
scoring_system epss
scoring_elements 0.4845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1013
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1013
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1013
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343754
reference_id 2343754
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343754
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:11:49Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:11:49Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:11:49Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:11:49Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
13
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
14
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
15
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
16
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
17
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
18
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
19
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
20
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
21
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
22
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
23
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
24
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
25
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
26
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
27
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
28
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
29
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
30
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
31
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
32
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1932555
reference_id show_bug.cgi?id=1932555
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-04T21:11:49Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1932555
33
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
34
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1013
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7321-q5ca-e3g7
3
url VCID-ah8t-8he4-u3fx
vulnerability_id VCID-ah8t-8he4-u3fx
summary An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1009.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1009.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1009
reference_id
reference_type
scores
0
value 0.00799
scoring_system epss
scoring_elements 0.74428
published_at 2026-06-06T12:55:00Z
1
value 0.00799
scoring_system epss
scoring_elements 0.74423
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1009
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1009
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1009
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343760
reference_id 2343760
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343760
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
reference_id mfsa2025-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-08/
reference_id mfsa2025-08
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://www.mozilla.org/security/advisories/mfsa2025-08/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
15
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
16
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
17
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
18
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
19
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
20
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
21
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
22
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
23
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
24
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
25
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
26
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
27
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
28
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
29
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
30
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
31
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
32
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
33
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
34
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1936613
reference_id show_bug.cgi?id=1936613
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-14T03:55:36Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1936613
35
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
36
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1009
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ah8t-8he4-u3fx
4
url VCID-cfa9-bcv2-xke8
vulnerability_id VCID-cfa9-bcv2-xke8
summary A race during concurrent delazification could have led to a use-after-free.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1012.json
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1012.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1012
reference_id
reference_type
scores
0
value 0.00427
scoring_system epss
scoring_elements 0.62777
published_at 2026-06-06T12:55:00Z
1
value 0.00427
scoring_system epss
scoring_elements 0.62767
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1012
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1012
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1012
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343765
reference_id 2343765
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343765
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
reference_id mfsa2025-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-08/
reference_id mfsa2025-08
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://www.mozilla.org/security/advisories/mfsa2025-08/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
15
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
16
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
17
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
18
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
19
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
20
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
21
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
22
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
23
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
24
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
25
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
26
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
27
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
28
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
29
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
30
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
31
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
32
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
33
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
34
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1939710
reference_id show_bug.cgi?id=1939710
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T16:01:27Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1939710
35
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
36
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1012
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cfa9-bcv2-xke8
5
url VCID-pah8-n6cz-c7b9
vulnerability_id VCID-pah8-n6cz-c7b9
summary Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1016.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1016.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1016
reference_id
reference_type
scores
0
value 0.00313
scoring_system epss
scoring_elements 0.54811
published_at 2026-06-06T12:55:00Z
1
value 0.00313
scoring_system epss
scoring_elements 0.548
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1016
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1016
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1016
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343752
reference_id 2343752
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343752
5
reference_url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1936601%2C1936844%2C1937694%2C1938469%2C1939583%2C1940994
reference_id buglist.cgi?bug_id=1936601%2C1936844%2C1937694%2C1938469%2C1939583%2C1940994
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1936601%2C1936844%2C1937694%2C1938469%2C1939583%2C1940994
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
7
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
reference_id mfsa2025-08
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-08
9
reference_url https://www.mozilla.org/security/advisories/mfsa2025-08/
reference_id mfsa2025-08
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-08/
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
11
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
13
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
15
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:03:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
16
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
17
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
18
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
19
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
20
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
21
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
22
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
23
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
24
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
25
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
26
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
27
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
28
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
29
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
30
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
31
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
32
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
33
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
34
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
35
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
36
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1016
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pah8-n6cz-c7b9
6
url VCID-qxnq-dd84-xuf7
vulnerability_id VCID-qxnq-dd84-xuf7
summary Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1017.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1017.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1017
reference_id
reference_type
scores
0
value 0.00308
scoring_system epss
scoring_elements 0.54351
published_at 2026-06-06T12:55:00Z
1
value 0.00308
scoring_system epss
scoring_elements 0.54343
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1017
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1017
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1017
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343748
reference_id 2343748
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343748
5
reference_url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1926256%2C1935984%2C1935471
reference_id buglist.cgi?bug_id=1926256%2C1935984%2C1935471
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:05:18Z/
url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1926256%2C1935984%2C1935471
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
7
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:05:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
9
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:05:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
11
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:05:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
13
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T21:05:18Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
14
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
15
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
16
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
17
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
18
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
19
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
20
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
21
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
22
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
23
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
24
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
25
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
26
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
27
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
28
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
29
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
30
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
31
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
32
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
33
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
34
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1017
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qxnq-dd84-xuf7
7
url VCID-u9tm-qdjs-abeb
vulnerability_id VCID-u9tm-qdjs-abeb
summary A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1011.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1011.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-1011
reference_id
reference_type
scores
0
value 0.00291
scoring_system epss
scoring_elements 0.52847
published_at 2026-06-06T12:55:00Z
1
value 0.00291
scoring_system epss
scoring_elements 0.52841
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-1011
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1011
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1011
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343756
reference_id 2343756
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343756
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
reference_id mfsa2025-07
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-07
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-07/
reference_id mfsa2025-07
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T19:01:33Z/
url https://www.mozilla.org/security/advisories/mfsa2025-07/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T19:01:33Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T19:01:33Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
reference_id mfsa2025-11
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-11
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-11/
reference_id mfsa2025-11
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T19:01:33Z/
url https://www.mozilla.org/security/advisories/mfsa2025-11/
13
reference_url https://access.redhat.com/errata/RHSA-2025:1066
reference_id RHSA-2025:1066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1066
14
reference_url https://access.redhat.com/errata/RHSA-2025:1132
reference_id RHSA-2025:1132
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1132
15
reference_url https://access.redhat.com/errata/RHSA-2025:1133
reference_id RHSA-2025:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1133
16
reference_url https://access.redhat.com/errata/RHSA-2025:1135
reference_id RHSA-2025:1135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1135
17
reference_url https://access.redhat.com/errata/RHSA-2025:1136
reference_id RHSA-2025:1136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1136
18
reference_url https://access.redhat.com/errata/RHSA-2025:1137
reference_id RHSA-2025:1137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1137
19
reference_url https://access.redhat.com/errata/RHSA-2025:1138
reference_id RHSA-2025:1138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1138
20
reference_url https://access.redhat.com/errata/RHSA-2025:1139
reference_id RHSA-2025:1139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1139
21
reference_url https://access.redhat.com/errata/RHSA-2025:1140
reference_id RHSA-2025:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1140
22
reference_url https://access.redhat.com/errata/RHSA-2025:1184
reference_id RHSA-2025:1184
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1184
23
reference_url https://access.redhat.com/errata/RHSA-2025:1283
reference_id RHSA-2025:1283
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1283
24
reference_url https://access.redhat.com/errata/RHSA-2025:1292
reference_id RHSA-2025:1292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1292
25
reference_url https://access.redhat.com/errata/RHSA-2025:1317
reference_id RHSA-2025:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1317
26
reference_url https://access.redhat.com/errata/RHSA-2025:1318
reference_id RHSA-2025:1318
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1318
27
reference_url https://access.redhat.com/errata/RHSA-2025:1319
reference_id RHSA-2025:1319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1319
28
reference_url https://access.redhat.com/errata/RHSA-2025:1339
reference_id RHSA-2025:1339
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1339
29
reference_url https://access.redhat.com/errata/RHSA-2025:1340
reference_id RHSA-2025:1340
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1340
30
reference_url https://access.redhat.com/errata/RHSA-2025:1341
reference_id RHSA-2025:1341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1341
31
reference_url https://access.redhat.com/errata/RHSA-2025:1348
reference_id RHSA-2025:1348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1348
32
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1936454
reference_id show_bug.cgi?id=1936454
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-05T19:01:33Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1936454
33
reference_url https://usn.ubuntu.com/7263-1/
reference_id USN-7263-1
reference_type
scores
url https://usn.ubuntu.com/7263-1/
34
reference_url https://usn.ubuntu.com/7663-1/
reference_id USN-7663-1
reference_type
scores
url https://usn.ubuntu.com/7663-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2025-1011
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u9tm-qdjs-abeb
8
url VCID-un91-2e6u-nkdy
vulnerability_id VCID-un91-2e6u-nkdy
summary A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-11704.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-11704.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-11704
reference_id
reference_type
scores
0
value 0.00271
scoring_system epss
scoring_elements 0.50823
published_at 2026-06-06T12:55:00Z
1
value 0.00271
scoring_system epss
scoring_elements 0.50818
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-11704
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11704
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11704
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2328942
reference_id 2328942
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2328942
5
reference_url https://security.gentoo.org/glsa/202501-10
reference_id GLSA-202501-10
reference_type
scores
url https://security.gentoo.org/glsa/202501-10
6
reference_url https://security.gentoo.org/glsa/202505-03
reference_id GLSA-202505-03
reference_type
scores
url https://security.gentoo.org/glsa/202505-03
7
reference_url https://security.gentoo.org/glsa/202509-02
reference_id GLSA-202509-02
reference_type
scores
url https://security.gentoo.org/glsa/202509-02
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2024-63
reference_id mfsa2024-63
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2024-63
9
reference_url https://www.mozilla.org/security/advisories/mfsa2024-63/
reference_id mfsa2024-63
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-27T15:21:47Z/
url https://www.mozilla.org/security/advisories/mfsa2024-63/
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2024-67
reference_id mfsa2024-67
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2024-67
11
reference_url https://www.mozilla.org/security/advisories/mfsa2024-67/
reference_id mfsa2024-67
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-27T15:21:47Z/
url https://www.mozilla.org/security/advisories/mfsa2024-67/
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
reference_id mfsa2025-09
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-09
13
reference_url https://www.mozilla.org/security/advisories/mfsa2025-09/
reference_id mfsa2025-09
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-27T15:21:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-09/
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
reference_id mfsa2025-10
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-10
15
reference_url https://www.mozilla.org/security/advisories/mfsa2025-10/
reference_id mfsa2025-10
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-27T15:21:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-10/
16
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1899402
reference_id show_bug.cgi?id=1899402
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-11-27T15:21:47Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1899402
17
reference_url https://usn.ubuntu.com/7134-1/
reference_id USN-7134-1
reference_type
scores
url https://usn.ubuntu.com/7134-1/
fixed_packages
0
url pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@115.14.0esr-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@128.7.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1%3Fdistro=trixie
4
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb12u1%3Fdistro=trixie
5
url pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.10.2esr-1~deb13u1%3Fdistro=trixie
6
url pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
purl pkg:deb/debian/firefox-esr@140.11.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ghpk-c1e6-pkae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@140.11.0esr-1%3Fdistro=trixie
aliases CVE-2024-11704
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-un91-2e6u-nkdy
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/firefox-esr@128.7.0esr-1~deb12u1%3Fdistro=trixie