VDB
GCVE-110-MAGEIA-2025-48
GCVE-110-MAGEIA-2025-48
Advisory Published
Use-after-free in XSLT. (CVE-2025-1009)
Use-after-free in Custom Highlight. (CVE-2025-1010)
A bug in WebAssembly code generation could result in a crash.
(CVE-2025-1011)
Use-after-free during concurrent delazification. (CVE-2025-1012)
Potential double-free vulnerability in PKCS#7 decryption handling.
(CVE-2024-11704)
Potential opening of private browsing tabs in normal browsing windows.
(CVE-2025-1013)
Certificate length was not properly checked. (CVE-2025-1014)
Unsanitized address book fields. (CVE-2025-1015)
Address of e-mail sender can be spoofed by malicious email.
(CVE-2025-0510)
Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR
115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7.
(CVE-2025-1016)
Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR
128.7, and Thunderbird 128.7. (CVE-2025-1017)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | thunderbird | 0 (affected), 128.7.0-1.mga9 (unaffected), 0 (affected), 128.7.0-1.mga9 (unaffected) | — |
| Mageia | virtualbox | 0 (affected), 7.1.8-1.mga9 (unaffected) | — |
| Mageia | kmod-virtualbox | 0 (affected), 7.1.8-1.mga9 (unaffected) | — |
| Mageia | thunderbird-l10n | 0 (affected), 0 (affected), 128.7.0-1.mga9 (unaffected), 128.7.0-1.mga9 (unaffected) | — |
Aliases
References
Browse GCVE Records
73,834 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.