1,430 results · Feed
-
Unscored —
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. T…
-
Unscored —
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…
-
Unscored —
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while …
-
Unscored —
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes…
-
Unscored —
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerabilit…
-
Unscored —
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evide…
-
Unscored —
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where…
-
Unscored —
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page sou…
-
Unscored —
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style dat…
-
Unscored —
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This r…
-
Unscored —
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing a…
-
Unscored —
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vuln…
-
Unscored —
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the d…
-
Unscored —
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still…
-
Unscored —
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disco…
-
Unscored —
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…
-
Unscored —
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…
-
Unscored —
Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in ho…
-
Unscored —
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, all…
-
Unscored —
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…
-
Unscored —
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. Th…
-
Unscored —
A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thu…
-
Unscored —
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-…
-
Unscored —
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 4…
-
Unscored —
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. …
-
Unscored —
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…
-
Unscored —
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…
-
Unscored —
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…
-
Unscored —
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…
-
Unscored —
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…
-
Unscored —
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecr…
-
Unscored —
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroy…
-
Unscored —
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the …
-
Unscored —
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…
-
Unscored —
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The res…
-
Unscored —
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potent…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…