| CVE-2020-12406 |
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12416 |
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12420 |
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12419 |
When processing callbacks that occurred during window flushing in the parent process, the associated window may die;…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12417 |
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12425 |
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred,…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12415 |
When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12423 |
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12422 |
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow,…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12421 |
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12426 |
Mozilla developers and community members reported memory safety bugs present in Firefox 77
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12418 |
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12424 |
When constructing a permission prompt for WebRTC, a URI was supplied from the content process
|
Not rated
|
Jul 9, 2020 |
| CVE-2018-12371 |
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-6831 |
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC
|
Not rated
|
May 26, 2020 |
| CVE-2020-12387 |
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability
|
Not rated
|
May 26, 2020 |
| CVE-2020-12388 |
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape
|
Not rated
|
May 26, 2020 |
| CVE-2020-12389 |
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape
|
Not rated
|
May 26, 2020 |
| CVE-2020-12390 |
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks
|
Not rated
|
May 26, 2020 |
| CVE-2020-12391 |
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context
|
Not rated
|
May 26, 2020 |
| CVE-2020-12392 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can…
|
Not rated
|
May 26, 2020 |
| CVE-2020-12393 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be…
|
Not rated
|
May 26, 2020 |
| CVE-2020-12394 |
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by…
|
Not rated
|
May 26, 2020 |
| CVE-2020-12395 |
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7
|
Not rated
|
May 26, 2020 |
| CVE-2020-12396 |
Mozilla developers and community members reported memory safety bugs present in Firefox 75
|
Not rated
|
May 26, 2020 |