Category
Browsers
10,973 known vulnerabilities.
10,973 results · Feed
-
Unscored —CVE-2019-0655 EPSS 13%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0642 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in …
-
Unscored —CVE-2019-0651 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0607 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0652 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0650 EPSS 19%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …
-
Unscored —
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …
-
Unscored —CVE-2019-0610 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0644 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —CVE-2019-0593 EPSS 20%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, …
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iT…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS…
-
Unscored —CVE-2019-6215 Public exploit
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Saf…
-
Unscored —
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fi…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, …
-
Unscored —
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…
-
Unscored —
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted conte…
-
Unscored —
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions gra…
-
Unscored —
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the U…
-
Unscored —
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…
-
Unscored —
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on…
-
Unscored —
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sh…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed e…
-
Unscored —
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access you…
-
Unscored —
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, …
-
Unscored —
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through …
-
Unscored —
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about wh…
-
Unscored —
If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not di…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed e…
-
Unscored —
The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when…