Palemoon Pale Moon — known CVE vulnerabilities

Every CVE whose affected-product data names Palemoon Pale Moon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2013-1591 — CVSS 9.8 (critical): Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and…
• CVE-2018-12292 — CVSS 9.8 (critical): A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.
• CVE-2020-9545 — CVSS 7.5 (high): Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.