| CVE-2017-5440 |
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5391 |
Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5419 |
If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5430 |
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5380 |
A potential use-after-free found through fuzzing during DOM manipulation of SVG content
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5408 |
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5400 |
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5456 |
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5447 |
An out-of-bounds read during the processing of glyph widths during text layout
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5379 |
Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5418 |
An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5429 |
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5439 |
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5399 |
Memory safety bugs were reported in Firefox 51
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5390 |
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5446 |
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5417 |
When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5407 |
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5378 |
Hashed codes of JavaScript objects are shared between pages
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5389 |
WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5428 |
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5438 |
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5398 |
Memory safety bugs were reported in Thunderbird 45.7
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5406 |
A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5377 |
A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a…
|
Not rated
|
Jun 11, 2018 |