| CVE-2020-26971 |
Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26973 |
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26974 |
When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26978 |
Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35111 |
When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35112 |
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35113 |
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26968 |
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26966 |
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26965 |
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field,…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26961 |
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26960 |
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26959 |
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26958 |
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26956 |
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26953 |
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26951 |
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26950 |
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-15683 |
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3
|
Not rated
|
Oct 22, 2020 |
| CVE-2020-15663 |
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15664 |
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15669 |
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15670 |
Mozilla developers reported memory safety bugs present in Firefox for Android 79
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15673 |
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15676 |
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in…
|
Not rated
|
Oct 1, 2020 |