Veille CVE

Semaine du 15 septembre au 21 septembre 2025

5 CVE sur 13

Critique 2 Élevée 5 Moyenne 6 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-10537 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

  2. CVE-2025-10533 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

  3. CVE-2025-10528 7.3 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

  4. CVE-2025-10527 7.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

  5. CVE-2025-3025 7.3 Élevée

    Gen Digital CCleaner

    Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before < 6.36.11508.