| CVE-2018-12392 |
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12391 |
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12390 |
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12389 |
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12397 |
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18501 |
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-18505 |
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to…
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-5188 |
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5187 |
Memory safety bugs present in Firefox 60 and Firefox ESR 60
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5156 |
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12385 |
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12365 |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12364 |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12383 |
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12363 |
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12381 |
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12362 |
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3)…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12361 |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12379 |
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12369 |
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12387 |
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12378 |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12360 |
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12368 |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12386 |
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and…
|
Not rated
|
Oct 18, 2018 |