| CVE-2018-5176 |
The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5128 |
A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5109 |
An audio capture session can started under an incorrect origin from the site making the capture request
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5140 |
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5147 |
The libtremor library has the same flaw as CVE-2018-5146
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5099 |
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5165 |
In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5118 |
The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5175 |
A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5138 |
A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5108 |
A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5164 |
Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5154 |
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5127 |
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5146 |
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5090 |
Memory safety bugs were reported in Firefox 57
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5098 |
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5137 |
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5107 |
The printing process can bypass local access protections to read files available through symlinks, bypassing local…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5117 |
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5136 |
A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5106 |
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5126 |
Memory safety bugs were reported in Firefox 58
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5116 |
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5089 |
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5
|
Not rated
|
Jun 11, 2018 |