PatchTheCVE: ps project management teamhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-0958: content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL functionhttps://patchthecve.com/cve/CVE-2012-0958.htmlhttps://patchthecve.com/cve/CVE-2012-0958.htmlTue, 16 Jun 2026 23:38:34 +0000MEDIUM 4.3: content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.CVE-2012-4551: Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of serhttps://patchthecve.com/cve/CVE-2012-4551.htmlhttps://patchthecve.com/cve/CVE-2012-4551.htmlTue, 16 Jun 2026 23:45:22 +0000HIGH 7.5: Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted web site, related to "certain hash tables."CVE-2012-0960: Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbahttps://patchthecve.com/cve/CVE-2012-0960.htmlhttps://patchthecve.com/cve/CVE-2012-0960.htmlTue, 16 Jun 2026 23:38:35 +0000HIGH 7.5: Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.