Approved changes feed: RSS · Atom

cpe:2.3:a:netsurf-browser:netsurf:3.11:*:*:*:*:*:*:*

part: a version: 3.11 update: *

VendorNetsurf Browser (ced4d029-0c03-55c3-a4f2-0b65dad98a5d)
ProductNetsurf (706a1a5c-b920-58e9-8845-5cb0f713a4cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/netsurf purl2cpe 2026-06-01 10:12:48.350643
pkg:deb/ubuntu/netsurf purl2cpe 2026-06-01 10:12:48.350644
pkg:github/mmuman/netsurf purl2cpe 2026-06-01 10:12:48.350646
pkg:github/netsurf-browser/netsurf purl2cpe 2026-06-01 10:12:48.350647
pkg:github/netsurf-plan9/netsurf purl2cpe 2026-06-01 10:12:48.350649
pkg:rpm/fedora/netsurf purl2cpe 2026-06-01 10:12:48.350650
pkg:rpm/opensuse/netsurf purl2cpe 2026-06-01 10:12:48.350652

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45663 vulnerable 2026-06-08 07:25:11.063810 Details available
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
Published: 2025-11-03T00:00:00.000Z
Updated: 2025-11-04T16:51:18.960Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29699 vulnerable 2026-06-08 07:14:56.542066 Details available
NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.
Published: 2025-11-03T00:00:00.000Z
Updated: 2025-11-04T16:48:42.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51317 vulnerable 2026-06-08 06:52:11.916941 Details available
An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function
Published: 2025-11-03T00:00:00.000Z
Updated: 2025-11-04T16:46:04.739Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.