| CVE-2023-32212 |
An attacker could have positioned a `datalist` element to obscure the address bar
|
Non notée
|
2 juin 2023 |
| CVE-2023-32205 |
In multiple cases browser prompts could have been obscured by popups controlled by content
|
Non notée
|
2 juin 2023 |
| CVE-2023-32211 |
A type checking bug would have led to invalid code being compiled
|
Non notée
|
2 juin 2023 |
| CVE-2023-32207 |
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29536 |
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29535 |
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced
|
Non notée
|
2 juin 2023 |
| CVE-2023-29541 |
Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29550 |
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-29533 |
A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29539 |
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the…
|
Non notée
|
2 juin 2023 |
| CVE-2023-29548 |
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28176 |
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-28164 |
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28163 |
When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-28162 |
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25744 |
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7
|
Non notée
|
2 juin 2023 |
| CVE-2023-25743 |
A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25734 |
After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would…
|
8.1
Élevée
|
2 juin 2023 |
| CVE-2023-25742 |
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash
|
Non notée
|
2 juin 2023 |
| CVE-2023-25752 |
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25732 |
When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25739 |
Module load requests that failed were not being checked as to whether or not they were cancelled causing a…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25751 |
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25730 |
A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen…
|
5.4
Moyenne
|
2 juin 2023 |
| CVE-2023-25738 |
Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in…
|
6.5
Moyenne
|
2 juin 2023 |