| CVE-2020-15656 |
JIT optimizations involving the Javascript arguments object could confuse later optimizations
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-12399 |
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12398 |
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12410 |
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12405 |
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12406 |
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12420 |
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12419 |
When processing callbacks that occurred during window flushing in the parent process, the associated window may die;…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12417 |
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12421 |
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12418 |
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to…
|
Not rated
|
Jul 9, 2020 |
| CVE-2018-12371 |
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-6831 |
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC
|
Not rated
|
May 26, 2020 |
| CVE-2020-12387 |
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability
|
Not rated
|
May 26, 2020 |
| CVE-2020-12392 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can…
|
Not rated
|
May 26, 2020 |
| CVE-2020-12393 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be…
|
Not rated
|
May 26, 2020 |
| CVE-2020-12395 |
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7
|
Not rated
|
May 26, 2020 |
| CVE-2020-12397 |
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address…
|
Not rated
|
May 22, 2020 |
| CVE-2020-6819 |
Exploited
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
|
8.1
High
|
Apr 24, 2020 |
| CVE-2020-6820 |
Exploited
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
|
8.1
High
|
Apr 24, 2020 |
| CVE-2020-6821 |
When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the…
|
Not rated
|
Apr 24, 2020 |
| CVE-2020-6822 |
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in…
|
Not rated
|
Apr 24, 2020 |
| CVE-2020-6825 |
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox…
|
Not rated
|
Apr 24, 2020 |
| CVE-2020-6805 |
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager,…
|
Not rated
|
Mar 25, 2020 |
| CVE-2020-6806 |
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array…
|
Not rated
|
Mar 25, 2020 |