| CVE-2021-29967 |
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11
|
Not rated
|
Jun 24, 2021 |
| CVE-2021-23981 |
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack…
|
Not rated
|
Mar 31, 2021 |
| CVE-2021-23982 |
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal…
|
Not rated
|
Mar 31, 2021 |
| CVE-2021-23984 |
A malicious extension could have opened a popup window lacking an address bar
|
Not rated
|
Mar 31, 2021 |
| CVE-2021-23987 |
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8
|
Not rated
|
Mar 31, 2021 |
| CVE-2021-23964 |
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23978 |
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23953 |
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin…
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23954 |
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion,…
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23960 |
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially…
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23968 |
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported…
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23969 |
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure…
|
Not rated
|
Feb 26, 2021 |
| CVE-2021-23973 |
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the…
|
Not rated
|
Feb 26, 2021 |
| CVE-2020-26971 |
Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26973 |
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26974 |
When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26978 |
Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35111 |
When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35112 |
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there…
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-35113 |
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5
|
Not rated
|
Jan 7, 2021 |
| CVE-2020-26970 |
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26968 |
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26966 |
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26965 |
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field,…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26961 |
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not…
|
Not rated
|
Dec 9, 2020 |