Tagged: Cybersecurity Alert

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit More information : https://www.jetbrains.com/privacy-security/issues-fixed/

System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes. More information : https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3r6j-5mp3-75wr

Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1988412

Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1995686

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1986431

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1988488

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1992032

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1992902

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1994022

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1994441

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to...

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1992130

Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1980904

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=1984940