netsurf-disclosure
by Fysac
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-45663 | Med | 0.42 | 6.5 | 0.00 | Nov 3, 2025 | An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure. | ||
| CVE-2024-51317 | Med | 0.42 | 6.5 | 0.00 | Nov 3, 2025 | An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function |
- risk 0.42cvss 6.5epss 0.00
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
- risk 0.42cvss 6.5epss 0.00
An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function