VDB

GCVE-110-NCSC-2025-235

GCVE-110-NCSC-2025-235
Advisory Published
Vulnetix · Advisory published July 23, 2025
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Weaknesses (CWE)

CWE-252Unchecked Return ValueCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-94Improper Control of Generation of Code ('Code Injection')CWE-534DEPRECATED: Information Exposure Through Debug Log FilesCWE-476NULL Pointer DereferenceCWE-350Reliance on Reverse DNS Resolution for a Security-Critical ActionCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-1021Improper Restriction of Rendered UI Layers or Frames

Affected Products

VendorProductVersionsPlatforms
Mozillavers:unknown/<141
Mozillavers:mozilla/<140.1
Mozillavers:mozilla/<115.26
Mozillavers:mozilla/<128.13
Mozillavers:unknown/unspecified|<140.1
Mozillavers:mozilla/<141

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,108 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›