358 results · Feed
-
Unscored —
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mi…
-
Unscored —
Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker th…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some o…
-
Unscored —CVE-2020-6514 Public exploit
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…
-
Unscored —
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary …
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…
-
Unscored —
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…
-
Unscored —
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path i…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corr…
-
Unscored —
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This…
-
Unscored —
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially explo…
-
Unscored —
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We…
-
Unscored —
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use…
-
Unscored —
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, …
-
Unscored —
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder i…
-
Unscored —
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to m…
-
Unscored —
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memor…
-
Unscored —
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, lead…
-
Unscored —
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were l…
-
Unscored —
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; ca…
-
Unscored —
When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest t…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed e…
-
Unscored —
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malici…
-
Unscored —
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, …
-
Unscored —
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…
-
Unscored —
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a po…
-
Unscored —
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Not…
-
Unscored —
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Not…
-
Unscored —
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability …
-
Unscored —
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed …
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by se…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed e…
-
Unscored —
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap c…
-
High 8.1CVE-2020-6819 Exploited
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…
KEV Nov 3, 2021 -
High 8.1CVE-2020-6820 Exploited
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …
KEV Nov 3, 2021 -
Unscored —
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…