63 results · Feed
-
Medium 6.5
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly …
-
Medium 4.3
In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as …
-
Medium 4.3
Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protecti…
-
High 7.5
If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed conten…
-
Medium 4.7
Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the cu…
-
High 7.1
Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. T…
-
High 7.8
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an externa…
-
Medium 6.1
When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the pa…
-
Unscored —
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnera…
-
Unscored —
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referre…
-
Medium 6.1
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a refle…
-
Unscored —CVE-2023-37456 Public exploit
The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affe…
-
Unscored —
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab…
-
Medium 6.1
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
-
Critical 9.8
The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for i…
-
Medium 6.5
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header.…
-
Unscored —
When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to…
-
Unscored —
A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI …
-
Unscored —
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the…
-
Unscored —
A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leak…
-
Unscored —
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was be…
-
Unscored —
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridgin…
-
Unscored —
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridgi…