712 results · Feed
-
Unscored —
The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin …
-
Unscored —
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption…
-
Unscored —
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability a…
-
Unscored —
HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will …
-
Unscored —
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking iss…
-
Unscored —
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corru…
-
Unscored —
The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the upd…
-
Unscored —
A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability aff…
-
Unscored —
When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be a…
-
Unscored —
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially…
-
Unscored —
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer …
-
Unscored —
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…
-
Unscored —
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected,…
-
Unscored —
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…
-
Unscored —
A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…
-
Unscored —
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corru…
-
Unscored —
The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the lo…
-
Unscored —
The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data usin…
-
Unscored —
An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation t…
-
Unscored —
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) eleme…
-
Unscored —
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a p…
-
Unscored —
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…
-
Unscored —
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If thes…
-
Unscored —
Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this…
-
Unscored —
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…
-
Unscored —
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the…
-
Unscored —
The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users…
-
Unscored —
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to be…
-
Unscored —
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. …
-
Unscored —
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary…
-
Unscored —
The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. …
-
Unscored —
When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerpri…
-
Unscored —
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is stil…
-
Unscored —
A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older w…
-
Unscored —
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for l…
-
Unscored —
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely …
-
Unscored —
Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of …
-
Unscored —
The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violatio…
-
Unscored —
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. T…
-
Unscored —
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…