Aller au contenu

Vulnérabilités connues pour Mozilla Firefox ESR

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2018-12377 A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during… Non notée 18 oct. 2018
CVE-2018-12359 A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element… Non notée 18 oct. 2018
CVE-2018-12367 In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the… Non notée 18 oct. 2018
CVE-2018-12376 Memory safety bugs present in Firefox 61 and Firefox ESR 60.1 Non notée 18 oct. 2018
CVE-2018-12366 An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a… Non notée 18 oct. 2018
CVE-2018-5174 In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated… Non notée 11 juin 2018
CVE-2018-5159 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,… Non notée 11 juin 2018
CVE-2018-5183 Mozilla developers backported selected changes in the Skia library Non notée 11 juin 2018
CVE-2018-5158 The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be… Non notée 11 juin 2018
CVE-2018-5157 Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for… Non notée 11 juin 2018
CVE-2018-5131 Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a… Non notée 11 juin 2018
CVE-2018-5130 When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially… Non notée 11 juin 2018
CVE-2018-5150 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 Non notée 11 juin 2018
CVE-2018-5168 Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property… Non notée 11 juin 2018
CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of… Non notée 11 juin 2018
CVE-2018-5148 A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used… Non notée 11 juin 2018
CVE-2018-5129 A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages Non notée 11 juin 2018
CVE-2018-5155 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths Non notée 11 juin 2018
CVE-2018-5147 The libtremor library has the same flaw as CVE-2018-5146 Non notée 11 juin 2018
CVE-2018-5099 A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that… Non notée 11 juin 2018
CVE-2018-5154 A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths Non notée 11 juin 2018
CVE-2018-5127 A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script Non notée 11 juin 2018
CVE-2018-5146 An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest Non notée 11 juin 2018
CVE-2018-5098 A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script… Non notée 11 juin 2018
CVE-2018-5117 If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to… Non notée 11 juin 2018

Autres produits Mozilla