| CVE-2024-6603 |
In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards…
|
7.4
High
|
Jul 9, 2024 |
| CVE-2024-6601 |
A race condition could lead to a cross-origin container obtaining permissions of the top-level origin
|
4.7
Medium
|
Jul 9, 2024 |
| CVE-2024-6600 |
Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when…
|
6.3
Medium
|
Jul 9, 2024 |
| CVE-2024-5700 |
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
|
7.0
High
|
Jun 11, 2024 |
| CVE-2024-5691 |
By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if…
|
4.7
Medium
|
Jun 11, 2024 |
| CVE-2024-5696 |
By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a…
|
8.6
High
|
Jun 11, 2024 |
| CVE-2024-5693 |
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another…
|
6.1
Medium
|
Jun 11, 2024 |
| CVE-2024-5692 |
On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file…
|
6.5
Medium
|
Jun 11, 2024 |
| CVE-2024-5690 |
By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were…
|
4.3
Medium
|
Jun 11, 2024 |
| CVE-2024-5688 |
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant
|
8.1
High
|
Jun 11, 2024 |
| CVE-2024-5702 |
Memory corruption in the networking stack could have led to a potentially exploitable crash
|
7.5
High
|
Jun 11, 2024 |
| CVE-2024-4770 |
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash
|
8.8
High
|
May 14, 2024 |
| CVE-2024-4769 |
When importing resources using Web Workers, error messages would distinguish the difference between…
|
5.9
Medium
|
May 14, 2024 |
| CVE-2024-4768 |
A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting…
|
6.1
Medium
|
May 14, 2024 |
| CVE-2024-4777 |
Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
|
7.5
High
|
May 14, 2024 |
| CVE-2024-4767 |
If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the…
|
4.3
Medium
|
May 14, 2024 |
| CVE-2024-4367 |
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js…
|
5.6
Medium
|
May 14, 2024 |
| CVE-2024-3302 |
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed
|
3.7
Low
|
Apr 16, 2024 |
| CVE-2024-3864 |
Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9
|
8.1
High
|
Apr 16, 2024 |
| CVE-2024-3863 |
The executable file warning was not presented when downloading .xrm-ms files
|
9.8
Critical
|
Apr 16, 2024 |
| CVE-2024-3861 |
If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and…
|
4.0
Medium
|
Apr 16, 2024 |
| CVE-2024-3859 |
On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by…
|
5.9
Medium
|
Apr 16, 2024 |
| CVE-2024-3857 |
The JIT created incorrect code for arguments in certain cases
|
7.8
High
|
Apr 16, 2024 |
| CVE-2024-3854 |
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads
|
8.8
High
|
Apr 16, 2024 |
| CVE-2024-3852 |
GetBoundName could return the wrong version of an object when JIT optimizations were applied
|
7.5
High
|
Apr 16, 2024 |