| CVE-2018-12363 |
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12381 |
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12362 |
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3)…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12370 |
In Reader View SameSite cookie protections are not checked on exiting
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12361 |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12379 |
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12369 |
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12387 |
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12378 |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12360 |
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12368 |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12386 |
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12377 |
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12359 |
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12367 |
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12358 |
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a…
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12376 |
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-12366 |
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a…
|
Not rated
|
Oct 18, 2018 |
| CVE-2016-9069 |
A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes
|
Not rated
|
Oct 18, 2018 |
| CVE-2018-5163 |
If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5160 |
WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5174 |
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5173 |
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5159 |
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5172 |
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard…
|
Not rated
|
Jun 11, 2018 |