2,316 results · Feed
-
Unscored —
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that …
-
Unscored —
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the a…
-
Unscored —
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have…
-
Unscored —
In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when R…
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript t…
-
Unscored —
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for …
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
-
Unscored —
Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurri…
-
Unscored —
A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. …
-
Unscored —
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache"…
-
Unscored —
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is use…
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results …
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name …
-
Unscored —
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed…
-
Unscored —
The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:"…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home …
-
Unscored —
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. Th…
-
Unscored —
URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scr…
-
Unscored —
If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission no…
-
Unscored —
A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operati…
-
Unscored —
A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash…
-
Unscored —
If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to…
-
Unscored —
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but th…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —CVE-2018-5094 EPSS 15%
A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage colle…
-
Unscored —
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting …
-
Unscored —
If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, thi…
-
Unscored —
In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by d…
-
Unscored —
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child proces…