1,842 results · Feed
-
Unscored —
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during g…
-
Unscored —
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…
-
Unscored —
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…
-
Unscored —
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is …
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed e…
-
Unscored —
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption …
-
Unscored —
Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in …
-
Unscored —
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and wri…
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
-
Unscored —
Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —CVE-2018-5094 EPSS 15%
A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage colle…
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —CVE-2018-5093 EPSS 19%
A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially …
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can…
-
Unscored —
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corru…
-
Unscored —
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit t…
-
Unscored —
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content,…
-
Unscored —
Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer b…
-
Unscored —
Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary…
-
Unscored —
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer …
-
Unscored —
Response header name interning does not have same-origin protections and these headers are stored in a global registry.…
-
Unscored —
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@exampl…
-
Unscored —
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even thoug…
-
Unscored —
Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_expos…
-
Unscored —
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evide…
-
Unscored —
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page sou…
-
Unscored —
JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is sup…
-
Unscored —
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…
-
Unscored —
Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume …