VDB
GCVE-VVD-MAGEIA-2025-328
GCVE-VVD-MAGEIA-2025-328
Advisory Published
Use-after-free in the WebRTC: Signaling component. (CVE-2025-14321)
Sandbox escape due to incorrect boundary conditions in the Graphics:
CanvasWebGL component. (CVE-2025-14322)
Privilege escalation in the DOM: Notifications component.
(CVE-2025-14323)
JIT miscompilation in the JavaScript Engine: JIT component.
(CVE-2025-14324, CVE-2025-14325, CVE-2025-14330)
Privilege escalation in the Netmonitor component. (CVE-2025-14328,
CVE-2025-14329)
Same-origin policy bypass in the Request Handling component.
(CVE-2025-14331)
Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6,
Firefox 146 and Thunderbird 146. (CVE-2025-14333)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | firefox | 0 (affected), 140.6.0-1.mga9 (unaffected) | — |
| Mageia | firefox-l10n | 0 (affected), 140.6.0-1.mga9 (unaffected) | — |
| Mageia | nss | 0 (affected), 3.119.0-1.mga9 (unaffected) | — |
| Mageia | nspr | 0 (affected), 4.38.2-1.mga9 (unaffected) | — |
References
Browse GCVE Records
774 records in the GCVE database · Updated October 31, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.