| CVE-2023-6859 |
A use-after-free condition affected TLS socket creation when under memory pressure
|
Non notée
|
19 déc. 2023 |
| CVE-2023-6858 |
Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling
|
8.8
Élevée
|
19 déc. 2023 |
| CVE-2023-6857 |
When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary
|
Non notée
|
19 déc. 2023 |
| CVE-2023-6856 |
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM…
|
Non notée
|
19 déc. 2023 |
| CVE-2023-50761 |
The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time
|
Non notée
|
19 déc. 2023 |
| CVE-2023-50762 |
When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never…
|
Non notée
|
19 déc. 2023 |
| CVE-2023-6212 |
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6209 |
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6208 |
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6207 |
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6206 |
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6205 |
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-6204 |
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak…
|
Non notée
|
21 nov. 2023 |
| CVE-2023-5732 |
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5730 |
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5728 |
During garbage collection extra operations were performed on a object that should not be
|
7.5
Élevée
|
24 oct. 2023 |
| CVE-2023-5727 |
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5726 |
A website could have obscured the full screen notification by using the file open dialog
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5725 |
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5724 |
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash
|
7.5
Élevée
|
24 oct. 2023 |
| CVE-2023-5721 |
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due…
|
Non notée
|
24 oct. 2023 |
| CVE-2023-5176 |
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5174 |
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer…
|
9.8
Critique
|
27 sept. 2023 |
| CVE-2023-5171 |
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker…
|
Non notée
|
27 sept. 2023 |
| CVE-2023-5169 |
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds…
|
Non notée
|
27 sept. 2023 |