2,316 results · Feed
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed ev…
-
Unscored —
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could c…
-
Unscored —
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race c…
-
Unscored —
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpri…
-
Unscored —
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially explo…
-
Unscored —
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was poss…
-
Unscored —
If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that…
-
Unscored —
An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypa…
-
Unscored —
A compromised content process could send a message to the parent process that would cause the 'Click to Play' permissio…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some o…
-
Unscored —
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these enti…
-
Unscored —
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call a…
-
Unscored —
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned i…
-
Unscored —
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploi…
-
Unscored —
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This c…
-
Unscored —
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was install…
-
Unscored —
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequen…
-
Unscored —
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial o…
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event handl…
-
Unscored —
When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could al…
-
Unscored —
When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of …
-
Unscored —
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory,…
-
Unscored —
If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction…
-
Unscored —
If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as in…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox…
-
Unscored —
A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any …
-
Unscored —
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters an…
-
Unscored —
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instance…
-
Unscored —
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating the…
-
Unscored —
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. Thi…
-
Unscored —
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a use…
-
Unscored —
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even wh…
-
Unscored —
A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using c…
-
Unscored —
A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability aff…
-
Unscored —
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as…
-
Unscored —
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a…
-
Unscored —
The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from ma…