| CVE-2019-17026 |
Exploited
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
|
8.8
High
|
Mar 2, 2020 |
| CVE-2013-5594 |
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding
|
Not rated
|
Feb 18, 2020 |
| CVE-2011-2669 |
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates
|
Not rated
|
Jan 21, 2020 |
| CVE-2011-2668 |
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
|
Not rated
|
Jan 21, 2020 |
| CVE-2011-2670 |
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
|
Not rated
|
Jan 13, 2020 |
| CVE-2019-17001 |
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-9812 |
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17025 |
Mozilla developers reported memory safety bugs present in Firefox 71
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17024 |
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17023 |
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17022 |
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape <…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17021 |
During the initialization of a new content process, a race condition occurs that can allow a content process to disclose…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17020 |
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17019 |
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17018 |
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17017 |
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17016 |
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17015 |
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17014 |
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17013 |
Mozilla developers reported memory safety bugs present in Firefox 70
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17012 |
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17011 |
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17010 |
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17009 |
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17008 |
When using nested workers, a use-after-free could occur during worker destruction
|
Not rated
|
Jan 8, 2020 |