1,441 results · Feed
-
Unscored —
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege…
-
Unscored —
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract p…
-
Unscored —
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing …
-
Unscored —
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…
-
Unscored —
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, trigge…
-
Unscored —
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …
-
Unscored —
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attem…
-
Unscored —
In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dere…
-
Unscored —
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…
-
Unscored —
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence …
-
Unscored —
A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and…
-
Unscored —
A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL pa…
-
Unscored —
A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN pa…
-
Unscored —
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address …
-
Unscored —
On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is start…
-
Unscored —
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…
-
Unscored —
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…
-
Unscored —
A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip …
-
Unscored —
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we pr…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
-
Unscored —CVE-2017-16541 Public exploit
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discov…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3…
-
Unscored —
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…
-
Unscored —
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…
-
Unscored —
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…
-
Unscored —
The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a deni…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cau…
-
Unscored —
Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.…
-
Unscored —
Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox b…
-
Unscored —
Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Fire…
-
Unscored —
Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x…
-
Unscored —
Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, an…
-
Unscored —
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates f…
-
Unscored —
Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox …
-
Unscored —
Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 …
-
Unscored —
Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier …