| CVE-2020-26960 |
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26959 |
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26958 |
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26957 |
OneCRL was non-functional in the new Firefox for Android due to a missing service initialization
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26956 |
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26955 |
When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26954 |
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26953 |
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26952 |
Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26951 |
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-26950 |
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an…
|
Non notée
|
9 déc. 2020 |
| CVE-2020-6829 |
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial…
|
Non notée
|
28 oct. 2020 |
| CVE-2020-15680 |
If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be…
|
Non notée
|
22 oct. 2020 |
| CVE-2020-15681 |
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could…
|
Non notée
|
22 oct. 2020 |
| CVE-2020-15682 |
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application…
|
Non notée
|
22 oct. 2020 |
| CVE-2020-15683 |
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3
|
Non notée
|
22 oct. 2020 |
| CVE-2020-15684 |
Mozilla developers reported memory safety bugs present in Firefox 81
|
Non notée
|
22 oct. 2020 |
| CVE-2020-12400 |
When converting coordinates from projective to affine, the modular inversion was not performed in constant time,…
|
Non notée
|
8 oct. 2020 |
| CVE-2020-12401 |
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication…
|
Non notée
|
8 oct. 2020 |
| CVE-2020-15663 |
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15664 |
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15665 |
Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15666 |
When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15667 |
When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15668 |
A lock was missing when accessing a data structure and importing certificate information into the trust database
|
Non notée
|
1 oct. 2020 |