| CVE-2020-15670 |
Mozilla developers reported memory safety bugs present in Firefox for Android 79
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15673 |
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15674 |
Mozilla developers reported memory safety bugs present in Firefox 80
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15675 |
When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15676 |
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15677 |
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15678 |
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential…
|
Non notée
|
1 oct. 2020 |
| CVE-2020-15654 |
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is…
|
Non notée
|
10 août 2020 |
| CVE-2020-15653 |
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links
|
Non notée
|
10 août 2020 |
| CVE-2020-15652 |
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a…
|
Non notée
|
10 août 2020 |
| CVE-2020-15648 |
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the…
|
Non notée
|
10 août 2020 |
| CVE-2020-15655 |
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks,…
|
Non notée
|
10 août 2020 |
| CVE-2020-15659 |
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0
|
Non notée
|
10 août 2020 |
| CVE-2020-15658 |
The code for downloading files did not properly take care of special characters, which led to an attacker being able…
|
Non notée
|
10 août 2020 |
| CVE-2020-15657 |
Firefox could be made to load attacker-supplied DLL files from the installation directory
|
Non notée
|
10 août 2020 |
| CVE-2020-15656 |
JIT optimizations involving the Javascript arguments object could confuse later optimizations
|
Non notée
|
10 août 2020 |
| CVE-2020-12407 |
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12402 |
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12399 |
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12412 |
By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12408 |
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12411 |
Mozilla developers reported memory safety bugs present in Firefox 76
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12409 |
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12410 |
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12405 |
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially…
|
Non notée
|
9 juil. 2020 |