Skip to content
OpenAdvisories

Product · zen-browser

desktop

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-41431

    Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted

    Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification stripped from the Firefox codebase it was forked from. The MAR files served to u…

    zen-browser desktop