| CVE-2021-23974 |
The DOMParser API did not properly process '<noscript>' elements for escaping
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23975 |
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and…
|
Non notée
|
26 févr. 2021 |
| CVE-2021-23976 |
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary…
|
Non notée
|
26 févr. 2021 |
| CVE-2020-26971 |
Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26972 |
The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26973 |
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26974 |
When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26975 |
When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26976 |
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26977 |
By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26978 |
Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26979 |
When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-35111 |
When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-35112 |
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there…
|
Non notée
|
7 janv. 2021 |
| CVE-2020-35113 |
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5
|
Non notée
|
7 janv. 2021 |
| CVE-2020-35114 |
Mozilla developers reported memory safety bugs present in Firefox 83
|
Non notée
|
7 janv. 2021 |
| CVE-2020-26969 |
Mozilla developers reported memory safety bugs present in Firefox 82
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26968 |
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26967 |
When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26966 |
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26965 |
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field,…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26964 |
If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0,…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26963 |
Repeated calls to the history and location interfaces could have been used to hang the browser
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26962 |
Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26961 |
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not…
|
Non notée
|
9 déc. 2020 |