Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:vpn:*:*:*:*:*:macos:*:*

part: a version: * update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductVpn (2140304f-a489-504d-8165-8bd02b3b769b)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mozilla-mobile/mozilla-vpn-client purl2cpe 2026-06-01 10:17:52.418920

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5687 vulnerable 2026-06-03 15:07:54.367643 Local privilege escalation vulnerability in Mozilla VPN clients for macOS v2.27.0 and below.
A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root. *This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.*. This vulnerability was fixed in Mozilla VPN 2.28.0 (macOS).
Published: 2025-06-11T12:07:49.739Z
Updated: 2026-04-13T14:31:48.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.