Skip to main content

Ublockorigin

3 CVEs vendor

Monthly

CVE-2025-4215 May 02, 21:15 LOW POC PATCH Monitor

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Denial Of Service Debian Debian Linux Ublock Origin Ublockorigin
NVD GitHub VulDB
CVSS 4.0
2.3
EPSS
1.3%
CVE-2021-36773 Jul 18, 04:15 HIGH POC This Week

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Debian Debian Linux Ublock Origin Nmatrix +2
NVD GitHub
CVSS 3.1
7.5
EPSS
1.3%
CVE-2019-11595 Apr 29, 15:29 CRITICAL POC Act Now

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

RCE Open Redirect Ublock Origin Ublockorigin
NVD
CVSS 3.0
9.0
EPSS
2.4%
EPSS 1% CVSS 2.3
LOW POC PATCH Monitor

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Denial Of Service Debian Debian Linux +2
NVD GitHub VulDB
EPSS 1% CVSS 7.5
HIGH POC This Week

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Debian Debian Linux +4
NVD GitHub
EPSS 2% CVSS 9.0
CRITICAL POC Act Now

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

RCE Open Redirect Ublock Origin +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy