| CVE-2017-7801 |
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7762 |
When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar
|
Non notée
|
11 juin 2018 |
| CVE-2017-7791 |
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7781 |
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7819 |
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7810 |
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3
|
Non notée
|
11 juin 2018 |
| CVE-2017-7752 |
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7790 |
On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys,…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7761 |
The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users
|
Non notée
|
11 juin 2018 |
| CVE-2017-7800 |
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7780 |
Memory safety bugs were reported in Firefox 54
|
Non notée
|
11 juin 2018 |
| CVE-2017-7818 |
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA)…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7789 |
If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7751 |
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash
|
Non notée
|
11 juin 2018 |
| CVE-2017-7770 |
A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7799 |
JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"
|
Non notée
|
11 juin 2018 |
| CVE-2017-7760 |
The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it
|
Non notée
|
11 juin 2018 |
| CVE-2017-7779 |
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2
|
Non notée
|
11 juin 2018 |
| CVE-2017-7808 |
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7788 |
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7768 |
The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7759 |
Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:"…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7798 |
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7750 |
A use-after-free vulnerability during video control operations when a "" element holds a reference to an older window if…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7767 |
The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using…
|
Non notée
|
11 juin 2018 |