Approved changes feed: RSS · Atom

cpe:2.3:a:palemoon:pale_moon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalemoon (5b4ce21f-64ba-520d-8808-71065260637c)
ProductPale Moon (2ca8ebcb-8e7f-5bc8-9682-53368b633bda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/filipinotech/pale-moon purl2cpe 2026-06-01 10:11:13.222164
pkg:github/roytam1/palemoon26 purl2cpe 2026-06-01 10:11:13.222166
pkg:github/roytam1/palemoon27 purl2cpe 2026-06-01 10:11:13.222168

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9545 vulnerable 2026-06-08 05:28:02.258070 Details available
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
Published: 2020-03-02T01:00:00.000Z
Updated: 2024-08-04T10:34:39.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12292 vulnerable 2026-06-08 05:10:41.346769 Details available
A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.
Published: 2018-06-13T14:00:00.000Z
Updated: 2024-08-05T08:30:59.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1591 vulnerable 2026-06-08 05:03:54.868442 Details available
Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.
Published: 2013-01-31T23:00:00.000Z
Updated: 2024-08-06T15:04:49.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.