| CVE-2019-17012 |
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17011 |
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17010 |
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17009 |
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17008 |
When using nested workers, a use-after-free could occur during worker destruction
|
Non notée
|
8 janv. 2020 |
| CVE-2019-17005 |
The plain text serializer used a fixed-size array for the number of elements it could process; however it was…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11764 |
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11763 |
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11762 |
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11761 |
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11760 |
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11759 |
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11758 |
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11757 |
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11745 |
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11733 |
When a master password is set, it is required to be entered again before stored passwords can be accessed in the…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11735 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11736 |
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11738 |
If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11740 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11742 |
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11743 |
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11744 |
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11746 |
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11747 |
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user…
|
Non notée
|
27 sept. 2019 |