| CVE-2018-5097 |
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5135 |
WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5105 |
WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5115 |
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5134 |
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache",…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5125 |
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5114 |
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5143 |
URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5104 |
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5133 |
If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5095 |
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5113 |
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5132 |
The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5103 |
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5094 |
A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5112 |
Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5122 |
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5093 |
A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5111 |
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5102 |
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5092 |
A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5101 |
A use-after-free vulnerability can occur when manipulating floating "first-letter" style elements, resulting in a…
|
Not rated
|
Jun 11, 2018 |
| CVE-2018-5091 |
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7837 |
SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that page
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7845 |
A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used…
|
Not rated
|
Jun 11, 2018 |