| CVE-2019-9808 |
If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not…
|
Not rated
|
Apr 26, 2019 |
| CVE-2019-9809 |
If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert…
|
Not rated
|
Apr 26, 2019 |
| CVE-2019-9810 |
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds…
|
Not rated
|
Apr 26, 2019 |
| CVE-2019-9813 |
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for…
|
Not rated
|
Apr 26, 2019 |
| CVE-2017-7777 |
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph…
|
Not rated
|
Apr 12, 2019 |
| CVE-2017-7776 |
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph
|
Not rated
|
Apr 12, 2019 |
| CVE-2017-7774 |
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function
|
Not rated
|
Apr 12, 2019 |
| CVE-2017-7773 |
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor
|
Not rated
|
Apr 12, 2019 |
| CVE-2017-7771 |
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function
|
Not rated
|
Apr 12, 2019 |
| CVE-2017-7772 |
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function
|
Not rated
|
Apr 12, 2019 |
| CVE-2018-18493 |
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18492 |
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18499 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh"…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18498 |
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18497 |
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18496 |
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18495 |
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18494 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12396 |
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12406 |
Mozilla developers and community members reported memory safety bugs present in Firefox 63
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12395 |
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12405 |
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12393 |
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12392 |
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12403 |
If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not…
|
Not rated
|
Feb 28, 2019 |