| CVE-2020-12389 |
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape
|
Non notée
|
26 mai 2020 |
| CVE-2020-12392 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can…
|
Non notée
|
26 mai 2020 |
| CVE-2020-12393 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be…
|
Non notée
|
26 mai 2020 |
| CVE-2020-12395 |
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7
|
Non notée
|
26 mai 2020 |
| CVE-2020-6819 |
Exploitée
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
|
8.1
Élevée
|
24 avr. 2020 |
| CVE-2020-6820 |
Exploitée
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
|
8.1
Élevée
|
24 avr. 2020 |
| CVE-2020-6821 |
When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the…
|
Non notée
|
24 avr. 2020 |
| CVE-2020-6822 |
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in…
|
Non notée
|
24 avr. 2020 |
| CVE-2020-6825 |
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox…
|
Non notée
|
24 avr. 2020 |
| CVE-2020-6827 |
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could…
|
Non notée
|
24 avr. 2020 |
| CVE-2020-6828 |
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and…
|
Non notée
|
24 avr. 2020 |
| CVE-2020-6805 |
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager,…
|
Non notée
|
25 mars 2020 |
| CVE-2020-6806 |
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array…
|
Non notée
|
25 mars 2020 |
| CVE-2020-6807 |
When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed…
|
Non notée
|
25 mars 2020 |
| CVE-2020-6811 |
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be…
|
Non notée
|
25 mars 2020 |
| CVE-2020-6812 |
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g
|
Non notée
|
25 mars 2020 |
| CVE-2020-6814 |
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5
|
Non notée
|
25 mars 2020 |
| CVE-2019-17026 |
Exploitée
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
|
8.8
Élevée
|
2 mars 2020 |
| CVE-2019-9812 |
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17024 |
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17022 |
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape <…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17021 |
During the initialization of a new content process, a race condition occurs that can allow a content process to disclose…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17017 |
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17016 |
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17015 |
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and…
|
Non notée
|
8 janv. 2020 |