Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Librewolf may let malicious page run code
published 4 days ago
Summary
The Librewolf browser includes a flaw in its video and audio handling code that could let a crafted web page cause the program to use memory that has already been released. This can lead to an attacker running their own code on a user's computer. Upgrade Librewolf to the latest version that contains the fix, or apply any security patches provided by the maintainers as soon as possible.
What to do
- Update cleanstart librewolf to version 101.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | librewolf |
< 101.0-r0 Fix: upgrade to 101.0-r0
|
Original advisory text
Use after free in Codecs in Google Chrome prior to 101
Security vulnerability affects the librewolf package. Use after free in Codecs in Google Chrome prior to 101.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-ZQ36771 · OSV
Track software like this
Free during beta