| CVE-2016-9900 |
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9899 |
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9898 |
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9897 |
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9896 |
Use-after-free while manipulating the "navigator" object within WebVR
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9895 |
Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9904 |
An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9894 |
A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9903 |
Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9893 |
Memory safety bugs were reported in Thunderbird 45.5
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9902 |
The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9901 |
HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9075 |
An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9074 |
An existing mitigation of timing side-channel attacks is insufficient in some circumstances
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9065 |
The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9073 |
WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9072 |
When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9064 |
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9071 |
Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9063 |
An integer overflow during the parsing of XML using the Expat library
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9080 |
Memory safety bugs were reported in Firefox 50.0.2
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9070 |
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9062 |
Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9079 |
Exploited
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
|
7.5
High
|
Jun 11, 2018 |
| CVE-2016-9061 |
A previously installed malicious Android application which defines a specific signature-level permissions used by…
|
Not rated
|
Jun 11, 2018 |