1,814 results · Feed
-
Unscored —
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks…
-
Unscored —
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This resul…
-
Unscored —
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in …
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
-
Unscored —
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…
-
Unscored —
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Th…
-
Unscored —
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of…
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script cont…
-
Unscored —
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of …
-
Unscored —
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with…
-
Unscored —
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potential…
-
Unscored —
Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we pr…
-
Unscored —
Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inlin…
-
Unscored —
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerabil…
-
Unscored —
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of…
-
High 7.5
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…
KEV Jun 22, 2023 -
Unscored —
An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zo…
-
Unscored —
An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in…
-
Unscored —
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a…
-
Unscored —
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amou…
-
Unscored —
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption…
-
Unscored —
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability a…
-
Unscored —
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking iss…
-
Unscored —
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corru…
-
Unscored —
The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the upd…
-
Unscored —
A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability aff…
-
Unscored —
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially…
-
Unscored —
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer …
-
Unscored —
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…
-
Unscored —
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected,…
-
Unscored —
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…
-
Unscored —
A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…
-
Unscored —
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corru…
-
Unscored —
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) eleme…
-
Unscored —
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a p…
-
Unscored —
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…
-
Unscored —
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If thes…
-
Unscored —
Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this…
-
Unscored —
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…