| CVE-2016-9078 |
Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some…
|
Non notée
|
11 juin 2018 |
| CVE-2016-9068 |
A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash
|
Non notée
|
11 juin 2018 |
| CVE-2016-9077 |
Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin
|
Non notée
|
11 juin 2018 |
| CVE-2016-9067 |
Two use-after-free errors during DOM operations resulting in potentially exploitable crashes
|
Non notée
|
11 juin 2018 |
| CVE-2016-9076 |
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing…
|
Non notée
|
11 juin 2018 |
| CVE-2016-9066 |
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5299 |
A previously installed malicious Android application with same signature-level permissions as Firefox can intercept…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5298 |
A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5290 |
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4
|
Non notée
|
11 juin 2018 |
| CVE-2016-5297 |
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5289 |
Memory safety bugs were reported in Firefox 49
|
Non notée
|
11 juin 2018 |
| CVE-2016-5296 |
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5288 |
Web content could access information in the HTTP cache if e10s is disabled
|
Non notée
|
11 juin 2018 |
| CVE-2016-5295 |
This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5287 |
A potentially exploitable use-after-free crash during actor destruction with service workers
|
Non notée
|
11 juin 2018 |
| CVE-2016-5294 |
The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5293 |
When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be…
|
Non notée
|
11 juin 2018 |
| CVE-2016-5292 |
During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash
|
Non notée
|
11 juin 2018 |
| CVE-2016-5291 |
A same-origin policy bypass with local shortcut files to load arbitrary local content from disk
|
Non notée
|
11 juin 2018 |
| CVE-2017-5461 |
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and…
|
Non notée
|
11 mai 2017 |
| CVE-2017-5031 |
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out…
|
Non notée
|
24 avr. 2017 |