| CVE-2021-23986 |
A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a…
|
Non notée
|
31 mars 2021 |
| CVE-2021-23987 |
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8
|
Non notée
|
31 mars 2021 |
| CVE-2021-23988 |
Mozilla developers reported memory safety bugs present in Firefox 86
|
Non notée
|
31 mars 2021 |
| CVE-2021-23964 |
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23965 |
Mozilla developers reported memory safety bugs present in Firefox 84
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23979 |
Mozilla developers reported memory safety bugs present in Firefox 85
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23978 |
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23977 |
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23963 |
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23953 |
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23954 |
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion,…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23955 |
The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23956 |
An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23957 |
Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23958 |
The browser could have been confused into transferring a screen sharing state into another tab, which would leak…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23959 |
An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23960 |
Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23961 |
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23962 |
Incorrect use of the '' method could have led to a user-after-poison and a potentially exploitable…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23968 |
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23969 |
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23970 |
Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23971 |
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23972 |
One phishing tactic on the web is to provide a link with HTTP Auth
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23973 |
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the…
|
Non notée
|
26 févr. 2021 |