Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-3028

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.4%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-3028


Contact Us

Shodan ® - All rights reserved