| CVE-2017-5390 |
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5446 |
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5407 |
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5378 |
Hashed codes of JavaScript objects are shared between pages
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5438 |
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5398 |
Memory safety bugs were reported in Thunderbird 45.7
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5406 |
A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5416 |
In certain circumstances a networking event listener can be prematurely released
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5426 |
On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5405 |
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5376 |
Use-after-free while manipulating XSL in XSLT documents
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5436 |
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5396 |
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5414 |
The file picker dialog can choose and display the wrong local default directory when instantiated
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5425 |
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5404 |
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5375 |
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5413 |
A segmentation fault can occur during some bidirectional layout operations
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5403 |
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5383 |
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display,…
|
Not rated
|
Jun 11, 2018 |
| CVE-2017-5373 |
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9900 |
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use…
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9899 |
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9898 |
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor
|
Not rated
|
Jun 11, 2018 |
| CVE-2016-9897 |
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with…
|
Not rated
|
Jun 11, 2018 |