| CVE-2023-25744 |
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7
|
Non notée
|
2 juin 2023 |
| CVE-2023-25743 |
A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25734 |
After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would…
|
8.1
Élevée
|
2 juin 2023 |
| CVE-2023-25742 |
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash
|
Non notée
|
2 juin 2023 |
| CVE-2023-25741 |
When dragging and dropping an image cross-origin, the image's size could potentially be leaked
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-25740 |
After downloading a Windows .scf script from the local filesystem, an attacker could supply a remote path that would…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25752 |
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25732 |
When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25731 |
Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25739 |
Module load requests that failed were not being checked as to whether or not they were cancelled causing a…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25751 |
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten…
|
Non notée
|
2 juin 2023 |
| CVE-2023-25730 |
A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen…
|
5.4
Moyenne
|
2 juin 2023 |
| CVE-2023-25750 |
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private…
|
4.3
Moyenne
|
2 juin 2023 |
| CVE-2023-25738 |
Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-25749 |
Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to…
|
4.3
Moyenne
|
2 juin 2023 |
| CVE-2023-25729 |
Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25748 |
By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in…
|
4.3
Moyenne
|
2 juin 2023 |
| CVE-2023-25737 |
An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25728 |
The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-25745 |
Memory safety bugs present in Firefox 109
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-25735 |
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in…
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-23605 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6
|
8.8
Élevée
|
2 juin 2023 |
| CVE-2023-23604 |
A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-23603 |
Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log`…
|
6.5
Moyenne
|
2 juin 2023 |
| CVE-2023-23602 |
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src…
|
6.5
Moyenne
|
2 juin 2023 |