1,814 results · Feed
-
Unscored —
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when proc…
-
Unscored —CVE-2019-11705 Public exploit
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processi…
-
Unscored —CVE-2019-11706 Public exploit
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when pr…
-
High 8.8
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…
KEV May 23, 2022 -
Critical 10.0
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…
KEV May 23, 2022 -
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some o…
-
Unscored —
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages …
-
Unscored —
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS require…
-
Unscored —
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting …
-
Unscored —
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and l…
-
Unscored —
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being use…
-
Unscored —
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bo…
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…
-
Unscored —
A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can b…
-
Unscored —
A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digi…
-
Unscored —
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the soun…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thund…
-
Unscored —
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects …
-
Unscored —
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local applicatio…
-
Unscored —
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre miti…
-
Unscored —
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script durin…
-
Unscored —
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocati…
-
Unscored —
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by maliciou…
-
Unscored —
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driv…
-
Unscored —
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and…
-
Unscored —
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check…
-
Unscored —CVE-2019-9813 Public exploit
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arb…
-
Unscored —
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…
-
Unscored —
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…
-
Unscored —
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sh…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…
-
Unscored —
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an i…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some o…
-
Unscored —
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a pote…
-
Unscored —
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of secu…
-
Unscored —
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…