| CVE-2019-11715 |
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11717 |
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11719 |
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11729 |
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11730 |
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9795 |
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9794 |
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9793 |
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9792 |
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9801 |
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9791 |
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9790 |
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9788 |
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9796 |
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9810 |
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9813 |
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for…
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18493 |
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18492 |
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18499 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh"…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18498 |
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18494 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12396 |
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12395 |
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12405 |
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12393 |
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an…
|
Non notée
|
28 févr. 2019 |