palemoon records

3 published records for vendor palemoon.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
42Plan	CVE-2018-12292Proof of concept	A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.palemoon · pale moon · CWE-416 Pre-auth Memory safety	Critical9.8	—	8.7%	Jun 13, 2018
40Plan	CVE-2013-1591No exploit	Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dredhat · enterprise virtualization · CWE-190 Pre-auth Memory safety	Critical9.8	—	3.6%	Jan 31, 2013
30Monitor	CVE-2020-9545No exploit	Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.palemoon · pale moon · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.3%	Mar 1, 2020

CVE-2018-12292
42Plan
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.
CriticalCVSS 9.8Proof of conceptEPSS 8%
- Pre-auth
- Memory safety
palemoon · pale moonJun 13, 2018
CVE-2013-1591
40Plan
Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-d
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Memory safety
redhat · enterprise virtualizationJan 31, 2013
CVE-2020-9545
30Monitor
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
HighCVSS 7.5No exploitEPSS 1%
palemoon · pale moonMar 1, 2020