Vulnerabilities

TI-2025-28823 CVE-2025-45663 · GHSA-8m64-p66f-h4hv

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

LOW 29

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0037 Published 2025-11-03 No fix listed CWE-244

TI-2025-21165 CVE-2025-29699 · GHSA-7cw3-hmgq-847v

LOW 29

NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00324 Published 2025-11-03 No fix listed CWE-416

TI-2024-34321 CVE-2024-51317 · GHSA-6rfx-fjhv-r26f

LOW 37

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0044 Published 2025-11-03 No fix listed CWE-77

TI-2012-00779 CVE-2012-0844 · GHSA-qh56-pqrv-3qfp

LOW 25

Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00422 Published 2020-02-21 No fix listed CWE-200