Skip to content
OpenAdvisories

Vendor

zen-browser

5 known vulnerabilities.

Products

desktop 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.4
    CVE-2026-44658

    Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation

    Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same restriction. The provider maps each RSS/Atom item link into i…

    zen-browser desktop