1,829 results · Feed
-
Unscored —
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability …
-
Unscored —
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed …
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by se…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed e…
-
Unscored —
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…
-
Unscored —
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, …
-
Unscored —
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing…
-
Unscored —
Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some…
-
Unscored —
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…
-
Unscored —
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, re…
-
Unscored —
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resiz…
-
Unscored —
When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been e…
-
Unscored —
When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML do…
-
Unscored —
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was poss…
-
Unscored —
After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification t…
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's …
-
Unscored —
When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block co…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evide…
-
Unscored —
Mozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of these bugs showed evide…
-
Unscored —
A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an…
-
Unscored —
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…
-
High 8.8
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…
KEV Nov 3, 2021 -
Unscored —
Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially …
-
Unscored —
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in th…
-
Unscored —
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…
-
Unscored —
During the initialization of a new content process, a race condition occurs that can allow a content process to disclos…
-
Unscored —
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securi…
-
Unscored —
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by …
-
Unscored —
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy o…
-
Unscored —
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…