| CVE-2017-5438 |
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5398 |
Memory safety bugs were reported in Thunderbird 45.7
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5405 |
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5376 |
Use-after-free while manipulating XSL in XSLT documents
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5436 |
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5396 |
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5386 |
WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5404 |
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5375 |
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5383 |
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5373 |
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9900 |
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9899 |
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9898 |
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9897 |
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9905 |
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9895 |
Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9904 |
An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9893 |
Memory safety bugs were reported in Thunderbird 45.5
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9902 |
The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9901 |
HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9074 |
An existing mitigation of timing side-channel attacks is insufficient in some circumstances
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9064 |
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9079 |
Exploited
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
|
7.5
High
|
Jun 11, 2018 |
| CVE-2016-9066 |
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large…
|
Not rated
|
Jun 11, 2018 |