Every CVE Search/ Get API key

CVE-2025-5283

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...

5.4 MediumFix available

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.64%Up 0.6 points since May 28, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-416, CWE-416
Updated
2026-11-02
EUVDEUVD-2025-16294 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
EUVD-2025-16294
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-j84v-78j2-55gh 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
GHSA-j84v-78j2-55gh
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-416
Updated
2026-11-02
NVD 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2025-5283 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
ALPINE-CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-03
OSV 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-06
Show 48 moreShow less
OSVDEBIAN-CVE-2025-5283 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
DEBIAN-CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1592 5.4

libvpx security update

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.

Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

Record
OESA-2025-1592
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1650 5.4

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

Record
OESA-2025-1650
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1651 5.4

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

Record
OESA-2025-1651
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1652 5.4

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

Record
OESA-2025-1652
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1653 5.4

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

Record
OESA-2025-1653
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8293 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:8293
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:8308 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:8308
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:8341 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:8341
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:8598 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8598
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8599 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8599
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8607 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8607
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8608 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8608
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8628 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8628
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8629 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8629
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8630 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8630
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8631 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8631
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8642 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8642
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8756 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2025:8756
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9071 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9071
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9072 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9072
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9073 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9073
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9074 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9074
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9075 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9075
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9076 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9076
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9077 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9077
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9118 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9118
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9119 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9119
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9120 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9120
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9122 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9122
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9123 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9123
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9124 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9124
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9125 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9125
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9126 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9126
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9127 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9127
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9128 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9128
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9155 8.1

Red Hat Security Advisory: firefox security update

Record
RHSA-2025:9155
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:9331 8.1

Red Hat Security Advisory: libvpx security update

Record
RHSA-2025:9331
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:8293 8.1

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8293
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:8308 8.1

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8308
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:8341 8.1

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8341
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:8607 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

  • firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8607
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:8608 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

  • firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8608
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:8756 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)

  • thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)

  • thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)

  • thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)

  • firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

  • firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

  • firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)

  • firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

  • firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

  • firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

  • firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)

  • firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8756
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9118 8.1

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9118
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:9119 8.1

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9119
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:9120 8.1

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9120
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-5283 5.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Record
UBUNTU-CVE-2025-5283
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt6-qtwebengine
Alpine:v3.22
 before 6.8.3-r1
6.8.3-r1
qt6-qtwebengine
Alpine:v3.23
 before 6.8.3-r1
6.8.3-r1
qt6-qtwebengine
Alpine:v3.24
 before 6.8.3-r1
6.8.3-r1
firefox
AlmaLinux:8
From an advisory covering 7 CVEs
 before 128.11.0-1.el8_10.alma.1
128.11.0-1.el8_10.alma.1
firefox
AlmaLinux:10
From an advisory covering 7 CVEs
 before 128.11.0-1.el10_0
128.11.0-1.el10_0
thunderbird
AlmaLinux:9
From an advisory covering 9 CVEs
 before 128.11.0-1.el9_6.alma.1
128.11.0-1.el9_6.alma.1
libvpx
AlmaLinux:9
 before 1.9.0-9.el9_6
1.9.0-9.el9_6
libvpx-devel
AlmaLinux:9
 before 1.9.0-9.el9_6
1.9.0-9.el9_6
libvpx
AlmaLinux:8
 before 1.7.0-12.el8_10
1.7.0-12.el8_10
libvpx-devel
AlmaLinux:8
 before 1.7.0-12.el8_10
1.7.0-12.el8_10
Show 216 moreShow less
Affected packages
PackageAffectedFixed
libvpx
AlmaLinux:10
 before 1.14.1-3.el10_0
1.14.1-3.el10_0
libvpx-devel
AlmaLinux:10
 before 1.14.1-3.el10_0
1.14.1-3.el10_0
libvpx
TuxCare:AlmaLinux:9.2
 before 1.9.0-7.el9_2.alma.1.tuxcare.els2
1.9.0-7.el9_2.alma.1.tuxcare.els2
libvpx-devel
TuxCare:AlmaLinux:9.2
 before 1.9.0-7.el9_2.alma.1.tuxcare.els2
1.9.0-7.el9_2.alma.1.tuxcare.els2
libvpx-utils
TuxCare:AlmaLinux:9.2
 before 1.9.0-7.el9_2.alma.1.tuxcare.els2
1.9.0-7.el9_2.alma.1.tuxcare.els2
libvpx-dev
TuxCare:Ubuntu:18.04
 before 1.7.0-3ubuntu0.18.04.1+tuxcare.els4
1.7.0-3ubuntu0.18.04.1+tuxcare.els4
libvpx-doc
TuxCare:Ubuntu:18.04
 before 1.7.0-3ubuntu0.18.04.1+tuxcare.els4
1.7.0-3ubuntu0.18.04.1+tuxcare.els4
libvpx5
TuxCare:Ubuntu:18.04
 before 1.7.0-3ubuntu0.18.04.1+tuxcare.els4
1.7.0-3ubuntu0.18.04.1+tuxcare.els4
vpx-tools
TuxCare:Ubuntu:18.04
 before 1.7.0-3ubuntu0.18.04.1+tuxcare.els4
1.7.0-3ubuntu0.18.04.1+tuxcare.els4
chromium
Debian:12
 before 137.0.7151.55-3~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 45 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1
137.0.7151.55-3~deb12u1
chromium
Debian:13
 before 137.0.7151.55-1
137.0.7151.55-1
chromium
Debian:14
 before 137.0.7151.55-1
137.0.7151.55-1
firefox-esr
Debian:12
 before 128.11.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
128.11.0esr-1~deb12u1
firefox-esr
Debian:13
 before 128.11.0esr-1
128.11.0esr-1
firefox-esr
Debian:14
 before 128.11.0esr-1
128.11.0esr-1
libvpx
Debian:12
 before 1.12.0-1+deb12u4, plus listed versions
1.12.0-11.12.0-1+deb12u11.12.0-1+deb12u21.12.0-1+deb12u3
1.12.0-1+deb12u4
libvpx
Debian:13
 before 1.15.0-2.1
1.15.0-2.1
libvpx
Debian:14
 before 1.15.0-2.1
1.15.0-2.1
thunderbird
Debian:12
 before 1:128.11.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:128.11.0esr-1~deb12u1
thunderbird
Debian:13
 before 1:128.11.0esr-1
1:128.11.0esr-1
thunderbird
Debian:14
 before 1:128.11.0esr-1
1:128.11.0esr-1
firefox-esr
Debian:11
From an advisory covering 7 CVEs
 before 128.11.0esr-1~deb11u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1
128.11.0esr-1~deb11u1
thunderbird
Debian:11
From an advisory covering 9 CVEs
 before 1:128.11.0esr-1~deb11u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1
1:128.11.0esr-1~deb11u1
libvpx
Debian:11
 before 1.9.0-1+deb11u4, plus listed versions
1.9.0-11.9.0-1+deb11u11.9.0-1+deb11u21.9.0-1+deb11u3
1.9.0-1+deb11u4
firefox-esr
Debian:12
From an advisory covering 7 CVEs
 before 128.11.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
128.11.0esr-1~deb12u1
chromium
Debian:12
From an advisory covering 8 CVEs
 before 137.0.7151.55-3~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 45 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1
137.0.7151.55-3~deb12u1
thunderbird
Debian:12
From an advisory covering 9 CVEs
 before 1:128.11.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:128.11.0esr-1~deb12u1
chromium-browser-stable
Mageia:9
From an advisory covering 12 CVEs
 before 136.0.7103.113-2.mga9.tainted
136.0.7103.113-2.mga9.tainted
libvpx
Mageia:9
 before 1.12.0-1.4.mga9
1.12.0-1.4.mga9
libvpx
openEuler:24.03-LTS-SP1
 before 1.13.1-4.oe2403sp1
1.13.1-4.oe2403sp1
libvpx
openEuler:20.03-LTS-SP4
 before 1.7.0-12.oe2003sp4
1.7.0-12.oe2003sp4
libvpx
openEuler:22.03-LTS-SP3
 before 1.7.0-13.oe2203sp3
1.7.0-13.oe2203sp3
libvpx
openEuler:22.03-LTS-SP4
 before 1.7.0-13.oe2203sp4
1.7.0-13.oe2203sp4
libvpx
openEuler:24.03-LTS
 before 1.13.1-4.oe2403
1.13.1-4.oe2403
firefox
openEuler:24.03-LTS
 before 128.11.0-1.oe2403
128.11.0-1.oe2403
firefox
openEuler:24.03-LTS-SP1
 before 128.11.0-1.oe2403sp1
128.11.0-1.oe2403sp1
firefox
openEuler:22.03-LTS-SP3
 before 128.11.0-1.oe2203sp3
128.11.0-1.oe2203sp3
firefox
openEuler:22.03-LTS-SP4
 before 128.11.0-1.oe2203sp4
128.11.0-1.oe2203sp4
firefox
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
firefox-x11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
firefox
Red Hat:enterprise_linux:10.0
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
firefox-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
firefox-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
thunderbird-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
thunderbird-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
thunderbird
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
thunderbird-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
thunderbird-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
thunderbird
Red Hat:enterprise_linux:10.0
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
thunderbird
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
thunderbird
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
thunderbird-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
thunderbird-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
firefox
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
firefox-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
firefox-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
firefox-x11
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_2
0:128.11.0-1.el9_2
firefox
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
firefox-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
firefox-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
firefox-x11
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_4
0:128.11.0-1.el9_4
firefox
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
firefox-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
firefox-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_0
0:128.11.0-1.el9_0
firefox
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el7_9
0:128.11.0-1.el7_9
firefox-debuginfo
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el7_9
0:128.11.0-1.el7_9
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_2
0:128.11.0-1.el8_2
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_4
0:128.11.0-1.el8_4
firefox
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
firefox-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_8
0:128.11.0-1.el8_8
libvpx
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-devel
Red Hat:enterprise_linux:9::crb
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx-utils-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-devel
Red Hat:enterprise_linux:8::crb
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx-utils-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx
Red Hat:enterprise_linux:10.0
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
libvpx-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
libvpx-debugsource
Red Hat:enterprise_linux:10.0
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
libvpx-utils-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
libvpx-devel
Red Hat:enterprise_linux:10.0
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
libvpx
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-utils-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-debugsource
Red Hat:rhel_eus:9.4::crb
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-devel
Red Hat:rhel_eus:9.4::crb
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx-utils-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:1.9.0-7.el9_4.1
0:1.9.0-7.el9_4.1
libvpx
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.0-7.el9_2.1
0:1.9.0-7.el9_2.1
libvpx-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.0-7.el9_2.1
0:1.9.0-7.el9_2.1
libvpx-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.0-7.el9_2.1
0:1.9.0-7.el9_2.1
libvpx-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.0-7.el9_2.1
0:1.9.0-7.el9_2.1
libvpx
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.0-7.el9_0.1
0:1.9.0-7.el9_0.1
libvpx-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.0-7.el9_0.1
0:1.9.0-7.el9_0.1
libvpx-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.0-7.el9_0.1
0:1.9.0-7.el9_0.1
libvpx-utils-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.0-7.el9_0.1
0:1.9.0-7.el9_0.1
libvpx
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-utils-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx
Red Hat:rhel_tus:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx-utils-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:1.7.0-10.el8_8.1
0:1.7.0-10.el8_8.1
libvpx
Red Hat:rhel_aus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-utils-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-utils-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx
Red Hat:rhel_tus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx-utils-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:1.7.0-10.el8_6.1
0:1.7.0-10.el8_6.1
libvpx
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.0-10.el8_4.1
0:1.7.0-10.el8_4.1
libvpx-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.0-10.el8_4.1
0:1.7.0-10.el8_4.1
libvpx-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.0-10.el8_4.1
0:1.7.0-10.el8_4.1
libvpx-utils-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.7.0-10.el8_4.1
0:1.7.0-10.el8_4.1
libvpx
Red Hat:rhel_aus:8.2::appstream
 before 0:1.7.0-8.el8_2.1
0:1.7.0-8.el8_2.1
libvpx-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.7.0-8.el8_2.1
0:1.7.0-8.el8_2.1
libvpx-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:1.7.0-8.el8_2.1
0:1.7.0-8.el8_2.1
libvpx-utils-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.7.0-8.el8_2.1
0:1.7.0-8.el8_2.1
firefox
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
firefox-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_6
0:128.11.0-1.el8_6
libvpx
Red Hat:rhel_els:7
 before 0:1.3.0-8.el7_9.1
0:1.3.0-8.el7_9.1
libvpx-debuginfo
Red Hat:rhel_els:7
 before 0:1.3.0-8.el7_9.1
0:1.3.0-8.el7_9.1
libvpx-devel
Red Hat:rhel_els:7
 before 0:1.3.0-8.el7_9.1
0:1.3.0-8.el7_9.1
libvpx-utils
Red Hat:rhel_els:7
 before 0:1.3.0-8.el7_9.1
0:1.3.0-8.el7_9.1
firefox
Rocky Linux:9
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
firefox
Rocky Linux:8
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
firefox
Rocky Linux:10
From an advisory covering 7 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird
Rocky Linux:9
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el9_6
0:128.11.0-1.el9_6
thunderbird
Rocky Linux:10
From an advisory covering 9 CVEs
 before 0:128.11.0-1.el10_0
0:128.11.0-1.el10_0
thunderbird
Rocky Linux:8
From an advisory covering 13 CVEs
 before 0:128.11.0-1.el8_10
0:128.11.0-1.el8_10
libvpx
Rocky Linux:9
 before 0:1.9.0-9.el9_6
0:1.9.0-9.el9_6
libvpx
Rocky Linux:8
 before 0:1.7.0-12.el8_10
0:1.7.0-12.el8_10
libvpx
Rocky Linux:10
 before 0:1.14.1-3.el10_0
0:1.14.1-3.el10_0
mozjs128
SUSE:Linux Enterprise Server 16.0
From an advisory covering 26 CVEs
 before 128.14.0-160000.1.1
128.14.0-160000.1.1
mozjs128
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 26 CVEs
 before 128.14.0-160000.1.1
128.14.0-160000.1.1
libvpx
Ubuntu:Pro:16.04:LTS
 before 1.5.0-2ubuntu1.1+esm4, plus listed versions
1.4.0-41.5.0-21.5.0-2ubuntu11.5.0-2ubuntu1.11.5.0-2ubuntu1.1+esm11.5.0-2ubuntu1.1+esm21.5.0-2ubuntu1.1+esm3
1.5.0-2ubuntu1.1+esm4
libvpx
Ubuntu:Pro:18.04:LTS
 before 1.7.0-3ubuntu0.18.04.1+esm3, plus listed versions
1.6.1-31.7.0-31.7.0-3ubuntu0.18.04.11.7.0-3ubuntu0.18.04.1+esm11.7.0-3ubuntu0.18.04.1+esm2
1.7.0-3ubuntu0.18.04.1+esm3
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
libvpx
Ubuntu:20.04:LTS
 before 1.8.2-1ubuntu0.4, plus listed versions
1.8.1-21.8.2-11.8.2-1build11.8.2-1ubuntu0.21.8.2-1ubuntu0.3
1.8.2-1ubuntu0.4
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
libvpx
Ubuntu:22.04:LTS
 before 1.11.0-2ubuntu2.4, plus listed versions
1.9.0-1ubuntu11.11.0-2ubuntu11.11.0-2ubuntu21.11.0-2ubuntu2.21.11.0-2ubuntu2.3
1.11.0-2ubuntu2.4
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:140.7.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 33 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.1
1:140.7.1+build1-0ubuntu0.22.04.1
libvpx
Ubuntu:24.04:LTS
 before 1.14.0-1ubuntu2.2, plus listed versions
1.12.0-1ubuntu21.13.1-2ubuntu11.14.0-1ubuntu11.14.0-1ubuntu21.14.0-1ubuntu2.1
1.14.0-1ubuntu2.2
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
mozjs115
Ubuntu:24.04:LTS
 All versions, plus listed versions
115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4
Show 4 moreShow less
115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1
 None known
chromium
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 138.0.7204.96-1.1
138.0.7204.96-1.1
mozjs128
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 128.12.0-1.1
128.12.0-1.1
mozjs128
openSUSE:Leap 16.0
From an advisory covering 26 CVEs
 before 128.14.0-160000.1.1
128.14.0-160000.1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, facts
affected, aliases, referencesOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-5283 is a medium vulnerability (CVSS 5.4) in Google Chrome, published May 27, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 51st percentile. Fixed in qt6-qtwebengine 6.8.3-r1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,012 versions and 30 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 23 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open