Read the docs

Ublockorigin

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ublockorigin records in CISA KEV

No Ublockorigin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority MEDIUM 43

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the s…

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.02407 Published 2019-04-29 No fix listed CWE-20
Priority LOW 35

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01261 Published 2021-07-18 No fix listed CWE-674
Open these records in search →