| CVE-2021-29970 |
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash
|
Non notée
|
5 août 2021 |
| CVE-2021-29976 |
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird
|
Non notée
|
5 août 2021 |
| CVE-2021-23994 |
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write
|
Non notée
|
24 juin 2021 |
| CVE-2021-23995 |
When Responsive Design Mode was enabled, it used references to objects that were previously freed
|
Non notée
|
24 juin 2021 |
| CVE-2021-23998 |
Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS…
|
Non notée
|
24 juin 2021 |
| CVE-2021-23999 |
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and…
|
Non notée
|
24 juin 2021 |
| CVE-2021-24002 |
When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been…
|
Non notée
|
24 juin 2021 |
| CVE-2021-29945 |
The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash
|
Non notée
|
24 juin 2021 |
| CVE-2021-29946 |
Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking…
|
Non notée
|
24 juin 2021 |
| CVE-2021-29951 |
The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants…
|
Non notée
|
24 juin 2021 |
| CVE-2021-29955 |
A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary…
|
Non notée
|
24 juin 2021 |
| CVE-2021-29964 |
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to…
|
Non notée
|
24 juin 2021 |
| CVE-2021-29967 |
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11
|
Non notée
|
24 juin 2021 |
| CVE-2021-23981 |
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack…
|
Non notée
|
31 mars 2021 |
| CVE-2021-23982 |
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal…
|
Non notée
|
31 mars 2021 |
| CVE-2021-23984 |
A malicious extension could have opened a popup window lacking an address bar
|
Non notée
|
31 mars 2021 |
| CVE-2021-23987 |
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8
|
Non notée
|
31 mars 2021 |
| CVE-2021-23964 |
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23978 |
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23953 |
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23954 |
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion,…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23960 |
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23968 |
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23969 |
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23973 |
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the…
|
Non notée
|
26 févr. 2021 |