1,955 results · Feed
-
Unscored —
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderb…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed ev…
-
Unscored —
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially explo…
-
Unscored —
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We…
-
Unscored —
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use…
-
Unscored —
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, …
-
Unscored —
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to m…
-
Unscored —
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memor…
-
Unscored —
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, lead…
-
Unscored —
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were l…
-
Unscored —
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; ca…
-
Unscored —
When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest t…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed e…
-
Unscored —
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malici…
-
Unscored —
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, …
-
Unscored —
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…
-
Unscored —
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a po…
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…
-
Unscored —
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address …
-
Unscored —
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap c…
-
High 8.1CVE-2020-6819 Exploited
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…
KEV Nov 3, 2021 -
High 8.1CVE-2020-6820 Exploited
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …
KEV Nov 3, 2021 -
Unscored —
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…
-
Unscored —
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…
-
Unscored —
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, re…
-
Unscored —
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resiz…
-
Unscored —
When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been e…
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's …
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evide…
-
Unscored —
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
-
Unscored —
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. Th…
-
Unscored —
If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these pass…
-
Unscored —
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…
-
Unscored —
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location…
-
Unscored —
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null poi…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…
-
High 8.8
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…
KEV Nov 3, 2021