Netsurf-browser Netsurf — known CVE vulnerabilities

Every CVE whose affected-product data names Netsurf-browser Netsurf, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-51317 — CVSS 6.5 (medium): An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function
• CVE-2025-29699 — CVSS 6.5 (medium): NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.
• CVE-2025-45663 — CVSS 6.5 (medium): An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
• CVE-2012-0844 — CVSS 5.5 (medium): Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.