| CVE-2021-43534 |
Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43535 |
A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43536 |
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43537 |
An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43538 |
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43539 |
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43541 |
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43542 |
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43543 |
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding…
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43545 |
Using the Location API in a loop could have caused severe application hangs and crashes
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-43546 |
It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor
|
Not rated
|
Dec 8, 2021 |
| CVE-2021-38492 |
When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to…
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38493 |
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38495 |
Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38496 |
During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory…
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38497 |
Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another…
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38498 |
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to…
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38500 |
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-38501 |
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-29980 |
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a…
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29984 |
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered…
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29985 |
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29986 |
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29988 |
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory…
|
Not rated
|
Aug 17, 2021 |
| CVE-2021-29989 |
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12
|
Not rated
|
Aug 17, 2021 |