| CVE-2017-7836 |
The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7827 |
Memory safety bugs were reported in Firefox 56
|
Non notée
|
11 juin 2018 |
| CVE-2017-7844 |
A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7835 |
Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7807 |
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7826 |
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4
|
Non notée
|
11 juin 2018 |
| CVE-2017-7834 |
A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7843 |
When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7817 |
A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7806 |
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7833 |
Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7842 |
If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for ""…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7816 |
WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7825 |
Several fonts on OS X display some Tibetan and Arabic characters as whitespace
|
Non notée
|
11 juin 2018 |
| CVE-2017-7797 |
Response header name interning does not have same-origin protections and these headers are stored in a global registry
|
Non notée
|
11 juin 2018 |
| CVE-2017-7832 |
The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7805 |
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer
|
Non notée
|
11 juin 2018 |
| CVE-2017-7840 |
JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7815 |
On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7831 |
A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7786 |
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements
|
Non notée
|
11 juin 2018 |
| CVE-2017-7796 |
On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7824 |
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content
|
Non notée
|
11 juin 2018 |
| CVE-2017-7839 |
Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7838 |
Punycode format text will be displayed for entire qualified international domain names in some instances when a…
|
Non notée
|
11 juin 2018 |