| CVE-2018-12402 |
The internal WebBrowserPersist code does not use correct origin context for a resource being saved
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12391 |
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12401 |
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12390 |
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12400 |
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12399 |
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12407 |
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content,…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12398 |
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12388 |
Mozilla developers and community members reported memory safety bugs present in Firefox 62
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-12397 |
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your…
|
Not rated
|
Feb 28, 2019 |
| CVE-2018-18503 |
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a…
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-18502 |
Mozilla developers and community members reported memory safety bugs present in Firefox 64
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-18501 |
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-18506 |
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is…
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-18505 |
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to…
|
Not rated
|
Feb 5, 2019 |
| CVE-2018-5188 |
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5187 |
Memory safety bugs present in Firefox 60 and Firefox ESR 60
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5186 |
Memory safety bugs present in Firefox 60
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5156 |
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12385 |
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12365 |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12375 |
Memory safety bugs present in Firefox 61
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12364 |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12383 |
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12382 |
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to…
|
Not rated
|
Oct 18, 2018 |