Login Request a demo
VP
Product
Vpn
by Mozilla · last CVE Jun 11, 2025
4
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vpn to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-5687
7.8
0%
Jun 11
A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root
Affected: before 2.28.0
CVE-2022-0517
7.8
0%
Dec 22
Mozilla VPN can load an OpenSSL configuration file from an unsecured directory
Affected: before 2.7.1
CVE-2020-15679
7.6
1%
Dec 22
An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain…
Affected: before 1.0.7_\(929\); before 1.2.2; 1.0.7 before 1.0.7_\(929\); 1.1.0 before 1.1.0_\(1360\)
CVE-2023-4104
5.5
0%
Sep 11
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups
Affected: before 2.16.1
Showing 4