VendorsuBlock Originublock_originany version
Vulnerabilities

uBlock Origin Ublock Origin any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2019-11595
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
Published 2019-04-29 · Modified
9.0EPSS 0.024
CVE-2021-36773
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).
Published 2021-07-18 · Modified
7.5EPSS 0.013
CVE-2025-4215
gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos
Published 2025-05-02 · Analyzed
3.7EPSS 0.007