01 Apr 2025

CVE-2025-3028

6.5 Medium Severity

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

suggest your own:

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Apps (0)

Operating Systems (0)

xtranslations

xdetection

xremediation

Comments (0)