| CVE-2018-5153 |
If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5182 |
If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5152 |
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5158 |
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5181 |
If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5151 |
Memory safety bugs were reported in Firefox 59
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5180 |
A use-after-free vulnerability can occur during WebGL operations
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5169 |
If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5157 |
Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5131 |
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5130 |
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5150 |
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5168 |
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5142 |
If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5167 |
The web console and JavaScript debugger do not sanitize all output that can be hyperlinked
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5148 |
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5100 |
A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed while…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5177 |
A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5129 |
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5121 |
Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5110 |
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5141 |
A vulnerability in the notifications Push API where notifications can be sent through service workers by web content…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5155 |
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5166 |
WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5119 |
The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin…
|
Not rated
|
Jun 11, 2018 |