| CVE-2024-5698 |
By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the…
|
5.4
Medium
|
Jun 11, 2024 |
| CVE-2024-5689 |
In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots'…
|
4.3
Medium
|
Jun 11, 2024 |
| CVE-2024-5697 |
A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in…
|
5.3
Medium
|
Jun 11, 2024 |
| CVE-2024-5695 |
If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an…
|
9.8
Critical
|
Jun 11, 2024 |
| CVE-2024-5694 |
An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string…
|
7.5
High
|
Jun 11, 2024 |
| CVE-2024-5687 |
If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the…
|
5.3
Medium
|
Jun 11, 2024 |
| CVE-2024-5700 |
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
|
7.0
High
|
Jun 11, 2024 |
| CVE-2024-5691 |
By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if…
|
4.7
Medium
|
Jun 11, 2024 |
| CVE-2024-5696 |
By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a…
|
8.6
High
|
Jun 11, 2024 |
| CVE-2024-5693 |
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another…
|
6.1
Medium
|
Jun 11, 2024 |
| CVE-2024-5692 |
On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file…
|
6.5
Medium
|
Jun 11, 2024 |
| CVE-2024-5690 |
By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were…
|
4.3
Medium
|
Jun 11, 2024 |
| CVE-2024-5688 |
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant
|
8.1
High
|
Jun 11, 2024 |
| CVE-2024-5702 |
Memory corruption in the networking stack could have led to a potentially exploitable crash
|
7.5
High
|
Jun 11, 2024 |
| CVE-2024-4778 |
Memory safety bugs present in Firefox 125
|
9.8
Critical
|
May 14, 2024 |
| CVE-2024-4776 |
A file dialog shown while in full-screen mode could have resulted in the window remaining disabled
|
8.2
High
|
May 14, 2024 |
| CVE-2024-4775 |
An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to…
|
5.9
Medium
|
May 14, 2024 |
| CVE-2024-4774 |
The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for…
|
6.5
Medium
|
May 14, 2024 |
| CVE-2024-4773 |
When a network error occurred during page load, the prior content could have remained in view with a blank URL bar
|
7.5
High
|
May 14, 2024 |
| CVE-2024-4772 |
An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values
|
5.9
Medium
|
May 14, 2024 |
| CVE-2024-4765 |
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite…
|
8.1
High
|
May 14, 2024 |
| CVE-2024-4764 |
Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free
|
9.8
Critical
|
May 14, 2024 |
| CVE-2024-4771 |
A memory allocation check was missing which would lead to a use-after-free if the allocation failed
|
8.6
High
|
May 14, 2024 |
| CVE-2024-4766 |
Different techniques existed to obscure the fullscreen notification in Firefox for Android
|
4.3
Medium
|
May 14, 2024 |
| CVE-2024-4770 |
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash
|
8.8
High
|
May 14, 2024 |