netsurf-browser records
8 published records for vendor netsurf-browser.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 62.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read2
- CWE-787 Out-of-bounds Write2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')1
- CWE-416 Use After Free1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2015-7505No exploit | Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denianetsurf-browser · libnsgif · CWE-787 | High8.8 | — | 3.1% | Feb 18, 2020 |
36Monitor | CVE-2015-7508No exploit | Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a deninetsurf-browser · libnsbmp · CWE-787 | High8.8 | — | 3.1% | Feb 11, 2020 |
31Monitor | CVE-2015-7507No exploit | libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table netsurf-browser · libnsbmp · CWE-125 | High7.5 | — | 2.0% | Feb 18, 2020 |
26Monitor | CVE-2015-7506No exploit | The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds reanetsurf-browser · libnsgif · CWE-125 | Medium6.5 | — | 1.2% | Feb 18, 2020 |
26Monitor | CVE-2024-51317No exploit | An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize functionnetsurf-browser · netsurf · CWE-77 | Medium6.5 | — | 0.4% | Nov 3, 2025 |
26Monitor | CVE-2025-45663No exploit | An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.netsurf-browser · netsurf · CWE-244 | Medium6.5 | — | 0.3% | Nov 3, 2025 |
26Monitor | CVE-2025-29699No exploit | NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.netsurf-browser · netsurf · CWE-416 | Medium6.5 | — | 0.3% | Nov 3, 2025 |
22Monitor | CVE-2012-0844No exploit | Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.netsurf-browser · netsurf · CWE-200 | Medium5.5 | — | 0.4% | Feb 21, 2020 |
- CVE-2015-750536Monitor
Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denia
HighCVSS 8.8No exploitEPSS 3%netsurf-browser · libnsgifFeb 18, 2020
- CVE-2015-750836Monitor
Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a deni
HighCVSS 8.8No exploitEPSS 3%netsurf-browser · libnsbmpFeb 11, 2020
- CVE-2015-750731Monitor
libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table
HighCVSS 7.5No exploitEPSS 2%netsurf-browser · libnsbmpFeb 18, 2020
- CVE-2015-750626Monitor
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds rea
MediumCVSS 6.5No exploitEPSS 1%netsurf-browser · libnsgifFeb 18, 2020
- CVE-2024-5131726Monitor
An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function
MediumCVSS 6.5No exploitEPSS 0%netsurf-browser · netsurfNov 3, 2025
- CVE-2025-4566326Monitor
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
MediumCVSS 6.5No exploitEPSS 0%netsurf-browser · netsurfNov 3, 2025
- CVE-2025-2969926Monitor
NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.
MediumCVSS 6.5No exploitEPSS 0%netsurf-browser · netsurfNov 3, 2025
- CVE-2012-084422Monitor
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
MediumCVSS 5.5No exploitEPSS 0%netsurf-browser · netsurfFeb 21, 2020