| CVE-2020-15677 |
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15678 |
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15654 |
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is…
|
Non notée
|
10 août 2020 |
| CVE-2020-15653 |
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links
|
Non notée
|
10 août 2020 |
| CVE-2020-15652 |
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a…
|
Non notée
|
10 août 2020 |
| CVE-2020-15650 |
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite…
|
Non notée
|
10 août 2020 |
| CVE-2020-15649 |
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their…
|
Non notée
|
10 août 2020 |
| CVE-2020-15655 |
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks,…
|
Non notée
|
10 août 2020 |
| CVE-2020-15659 |
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0
|
Non notée
|
10 août 2020 |
| CVE-2020-15658 |
The code for downloading files did not properly take care of special characters, which led to an attacker being able…
|
Non notée
|
10 août 2020 |
| CVE-2020-15657 |
Firefox could be made to load attacker-supplied DLL files from the installation directory
|
Non notée
|
10 août 2020 |
| CVE-2020-15656 |
JIT optimizations involving the Javascript arguments object could confuse later optimizations
|
Non notée
|
10 août 2020 |
| CVE-2020-12399 |
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12410 |
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12405 |
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12406 |
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12420 |
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12419 |
When processing callbacks that occurred during window flushing in the parent process, the associated window may die;…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12417 |
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12421 |
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12418 |
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to…
|
Non notée
|
9 juil. 2020 |
| CVE-2018-12371 |
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-6831 |
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC
|
Non notée
|
26 mai 2020 |
| CVE-2020-12387 |
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability
|
Non notée
|
26 mai 2020 |
| CVE-2020-12388 |
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape
|
Non notée
|
26 mai 2020 |