| CVE-2017-7804 |
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7794 |
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7814 |
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7785 |
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7823 |
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7830 |
The Resource Timing API incorrectly revealed navigations in cross-origin iframes
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7765 |
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7755 |
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7803 |
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7813 |
Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7822 |
The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7793 |
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7764 |
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7754 |
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7812 |
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7783 |
If a long user name is used in a username/password combination in a site URL (such as "…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7821 |
A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7802 |
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7828 |
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7792 |
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7811 |
Memory safety bugs were reported in Firefox 55
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7763 |
Default fonts on OS X display some Tibetan characters as whitespace
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7820 |
The "instanceof" operator can bypass the Xray wrapper mechanism
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7753 |
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-7782 |
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never…
|
Not rated
|
Jun 11, 2018 |