vulnerability

Gentoo Linux: CVE-2025-3028: Mozilla Firefox: Multiple Vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:N/C:N/I:P/A:P)	Apr 1, 2025	May 13, 2025	Sep 18, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:P)

Published

Apr 1, 2025

Added

May 13, 2025

Modified

Sep 18, 2025

Description

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

Solutions

gentoo-linux-upgrade-dev-lang-spidermonkeygentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin

References

CVE-2025-3028
https://attackerkb.com/topics/CVE-2025-3028
CWE-416
GENTOO-202505-02
GENTOO-202505-03
GENTOO-202509-02

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today