1,432 results · Feed
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurri…
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderb…
-
Unscored —
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…
-
Unscored —
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects…
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…
-
Unscored —
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderb…
-
Unscored —
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…
-
Unscored —
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a us…
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
-
Unscored —
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…
-
Unscored —
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Th…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script cont…
-
Unscored —
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of …
-
Unscored —
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potential…
-
Unscored —
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…
-
Unscored —
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) eleme…
-
Unscored —
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affe…
-
Unscored —
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the…
-
Unscored —
RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affect…
-
Unscored —
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to be…
-
Unscored —
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. …
-
Unscored —
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for l…