Vendors / Palemoon Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Palemoon records in CISA KEV No Palemoon vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08751 · Published 2018-06-13 · No fix listed CWE-416
Priority MEDIUM 48
Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03626 · Published 2013-01-31 · Fixed CWE-190
Priority LOW 36
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01348 · Published 2020-03-02 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
2 1 0 0 0
