2,316 results · Feed
-
Unscored —
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…
-
Unscored —
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on…
-
Unscored —
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed e…
-
Unscored —
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access you…
-
Unscored —
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, …
-
Unscored —
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through …
-
Unscored —
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about wh…
-
Unscored —
If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not di…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed e…
-
Unscored —
The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when…
-
Unscored —
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an i…
-
Unscored —
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and byp…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some o…
-
Unscored —
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a pote…
-
Unscored —
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-priva…
-
Unscored —
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other event…
-
Unscored —
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of secu…
-
Unscored —
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of …
-
Unscored —
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…
-
Unscored —
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is …
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed e…
-
Unscored —
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption …
-
Unscored —
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malic…
-
Unscored —
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can b…
-
Unscored —
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dy…
-
Unscored —
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a mal…
-
Unscored —
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cach…
-
Unscored —
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these password…
-
Unscored —
Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the messag…
-
Unscored —
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in …
-
Unscored —
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system…
-
Unscored —
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by fo…
-
Unscored —
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown…
-
Unscored —
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resultin…
-
Unscored —
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and wri…