Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…
-
Unscored —
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for t…
-
Unscored —
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderb…
-
Unscored —
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com…
-
Unscored —
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-…
-
Unscored —
Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an…
-
Unscored —
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…
-
Unscored —
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a…
-
Unscored —
The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If…
-
Unscored —
Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a us…
-
High 8.8
Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…
-
Unscored —
A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of f…
-
Unscored —
A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dy…
-
Unscored —
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exp…
-
Unscored —
Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. Th…
-
Unscored —
WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scrip…
-
Unscored —
Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension m…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
-
Unscored —
A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Cus…
-
Unscored —
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…
-
Unscored —
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Th…
-
Unscored —
A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing t…
-
Unscored —CVE-2018-5093 EPSS 19%
A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially …
-
Unscored —
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible throu…
-
Unscored —
Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When us…
-
Unscored —
If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the …
-
Unscored —
The printing process can bypass local access protections to read files available through symlinks, bypassing local file…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mix…
-
Unscored —
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise …
-
Unscored —
A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed whil…
-
Unscored —
The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in …
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…