| CVE-2020-26960 |
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26959 |
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26958 |
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26956 |
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26953 |
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26951 |
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-26950 |
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an…
|
Not rated
|
Dec 9, 2020 |
| CVE-2020-15683 |
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3
|
Not rated
|
Oct 22, 2020 |
| CVE-2020-15646 |
If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft…
|
Not rated
|
Oct 8, 2020 |
| CVE-2020-15663 |
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15664 |
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15669 |
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15670 |
Mozilla developers reported memory safety bugs present in Firefox for Android 79
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15673 |
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15676 |
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15677 |
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15678 |
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential…
|
Not rated
|
Oct 1, 2020 |
| CVE-2020-15654 |
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15653 |
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15652 |
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15648 |
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15655 |
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks,…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15659 |
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15658 |
The code for downloading files did not properly take care of special characters, which led to an attacker being able…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15657 |
Firefox could be made to load attacker-supplied DLL files from the installation directory
|
Not rated
|
Aug 10, 2020 |