NVD disclosure day
CVE-2025-1020
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety bugs in Firefox and Thunderbird may allow attackers to run arbitrary code through crafted data, posing a risk to user data and system integrity if reachable.
CVE-2025-1017
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety vulnerabilities in Firefox and Thunderbird may allow attackers to execute arbitrary code. These memory corruption bugs could be exploited if reachable or relevant to user interaction with crafted web pages or emails. Understanding if these products are in use is important for assessing potential risk.
CVE-2025-1016
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety flaws in Firefox and Thunderbird could allow arbitrary code execution if exploited, impacting data and system behavior. Affected products include specific versions of Firefox and Thunderbird.
CVE-2025-1009
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in Mozilla Firefox and Thunderbird, allowing an attacker to cause a crash with crafted XSLT data. This could potentially lead to further exploitation. The vulnerability affects internet-facing clients.
CVE-2024-40891
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Certain Zyxel DSL CPE devices have a security vulnerability that allows an authenticated attacker to execute operating system commands via Telnet. This poses a risk of unauthorized access and control over the affected devices. Organizations should identify and address this vulnerability to mitigate potential business i
CVE-2024-40890
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability exists in certain Zyxel DSL CPE devices, allowing authenticated attackers to execute OS commands. This can lead to device compromise and potential business risk.