PatchTheCVE: palemoonhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-9545: Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacosthttps://patchthecve.com/cve/CVE-2020-9545.htmlhttps://patchthecve.com/cve/CVE-2020-9545.htmlWed, 17 Jun 2026 03:28:07 +0000HIGH 7.5: Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.CVE-2018-12292: A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.https://patchthecve.com/cve/CVE-2018-12292.htmlhttps://patchthecve.com/cve/CVE-2018-12292.htmlWed, 17 Jun 2026 01:37:29 +0000CRITICAL 9.8: A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.CVE-2013-1591: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unhttps://patchthecve.com/cve/CVE-2013-1591.htmlhttps://patchthecve.com/cve/CVE-2013-1591.htmlTue, 16 Jun 2026 23:51:44 +0000CRITICAL 9.8: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which