| CVE-2020-6807 |
When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed…
|
Not rated
|
Mar 25, 2020 |
| CVE-2020-6811 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be…
|
Not rated
|
Mar 25, 2020 |
| CVE-2020-6812 |
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g
|
Not rated
|
Mar 25, 2020 |
| CVE-2020-6814 |
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5
|
Not rated
|
Mar 25, 2020 |
| CVE-2020-6792 |
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6800 |
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6798 |
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when…
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6797 |
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application…
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6795 |
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null…
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6794 |
If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these…
|
Not rated
|
Mar 2, 2020 |
| CVE-2020-6793 |
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location
|
Not rated
|
Mar 2, 2020 |
| CVE-2019-17026 |
Exploited
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
|
8.8
High
|
Mar 2, 2020 |
| CVE-2019-17012 |
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17011 |
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17010 |
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17009 |
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17008 |
When using nested workers, a use-after-free could occur during worker destruction
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17005 |
The plain text serializer used a fixed-size array for the number of elements it could process; however it was…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11764 |
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11763 |
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11762 |
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11761 |
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11760 |
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11759 |
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11758 |
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was…
|
Not rated
|
Jan 8, 2020 |