Category
Browsers
10,973 known vulnerabilities.
10,973 results · Feed
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …
-
Unscored —
A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…
-
Unscored —
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, result…
-
Unscored —
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication …
-
Unscored —
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from th…
-
Unscored —
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access …
-
Unscored —
Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. …
-
Unscored —
When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) wa…
-
Unscored —
When processing a MAR update file, after the signature has been validated, an invalid name length could result in a hea…
-
Unscored —
A lock was missing when accessing a data structure and importing certificate information into the trust database. This …
-
Unscored —
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. …
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of…
-
Unscored —
When typing in a password under certain conditions, a race may have occured where the InputContext was not being correc…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed ev…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corr…
-
Unscored —
When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially e…
-
Unscored —
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaSc…
-
Unscored —
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the dow…
-
Unscored —
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential …
-
Unscored —
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exp…
-
Unscored —
Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process…
-
Unscored —
Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker t…
-
Unscored —
Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially se…
-
Unscored —
Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromise…
-
Unscored —
Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform dom…
-
Unscored —
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote a…
-
Unscored —
Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the ren…
-
Unscored —
Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross…
-
Unscored —
Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 a…
-
Unscored —
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoo…
-
Unscored —
Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof t…
-
Unscored —
Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross…
-
Unscored —
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote a…
-
Unscored —
Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cr…
-
Unscored —
Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacke…
-
Unscored —
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially expl…
-
Unscored —
Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially ex…
-
Unscored —
Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to by…
-
Unscored —
Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a…