712 results · Feed
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results …
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…
-
Unscored —
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for t…
-
Unscored —
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …
-
Unscored —
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-…
-
Unscored —
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…
-
High 8.8
Malicious PDF can inject JavaScript into PDF Viewer
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability af…
-
Unscored —
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exp…
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
-
Unscored —
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script cont…
-
Unscored —
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of …
-
Unscored —
The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Andr…
-
Unscored —
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with…
-
Unscored —
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potential…
-
Unscored —
Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we pr…
-
Unscored —
Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inlin…
-
Unscored —
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerabil…
-
Unscored —
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of…
-
High 7.5
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…
KEV Jun 22, 2023 -
Unscored —
An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zo…
-
Unscored —
An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in…
-
Unscored —
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated…
-
Unscored —
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a…
-
Unscored —
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amou…