| CVE-2022-45420 |
Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-45409 |
The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-45408 |
Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-45418 |
If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-45406 |
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-45405 |
Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-45416 |
Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-45404 |
Through a series of popup and window.print() calls, an attacker can cause a window to go fullscreen without the user…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-45403 |
Service Workers should not be able to infer information about opaque cross-origin responses; but timing information…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-42927 |
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a…
|
8.1
High
|
Dec 22, 2022 |
| CVE-2022-42932 |
Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-42929 |
If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-42928 |
Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-40962 |
Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-40960 |
Concurrent use of the URL parser with non-UTF-8 data was not thread-safe
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40959 |
During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40958 |
By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40957 |
Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40956 |
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-3266 |
An out-of-bounds read can occur when decoding H264 video
|
5.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38472 |
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38478 |
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38477 |
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38476 |
A data race could occur in the PK11_ChangePW function, potentially leading to a use-after-free…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-38473 |
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone…
|
8.8
High
|
Dec 22, 2022 |