CVE-2025-10528 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Th…
High CVSS: 7.3

CVE-2025-10528

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.
Vendor
Mozilla
Product
Firefox
CWE
CWE-693
Yayın Tarihi
2025-09-16 13:15:45
Güncelleme
2025-11-03 19:15:44
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-693 Firefox HIGH Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1986185 https://www.mozilla.org/security/advisories/mfsa2025-73/ https://www.mozilla.org/security/advisories/mfsa2025-75/ https://www.mozilla.org/security/advisories/mfsa2025-77/ https://www.mozilla.org/security/advisories/mfsa2025-78/ https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html