1,814 results · Feed
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…
-
Unscored —
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption …
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text …
-
Unscored —
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can b…
-
Unscored —
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dy…
-
Unscored —
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cach…
-
Unscored —
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these password…
-
Unscored —
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forw…
-
Unscored —
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system…
-
Unscored —
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by fo…
-
Unscored —
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown…
-
Unscored —
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resultin…
-
Unscored —
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that …
-
Unscored —
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the a…
-
Unscored —
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have…
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for …
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply…
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurri…
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderb…
-
Unscored —
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…
-
Unscored —
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects…
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…
-
Unscored —
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderb…
-
Unscored —
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…
-
Unscored —
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a us…