| CVE-2019-11757 |
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11745 |
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a…
|
Non notée
|
8 janv. 2020 |
| CVE-2019-11739 |
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11740 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11742 |
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11743 |
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11744 |
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11746 |
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11752 |
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion
|
Non notée
|
27 sept. 2019 |
| CVE-2019-11755 |
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a…
|
Non notée
|
27 sept. 2019 |
| CVE-2019-9800 |
Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9811 |
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9815 |
If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9816 |
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups,…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9817 |
Images from a different domain can be read using a canvas object in some circumstances
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9818 |
A race condition is present in the crash generation server used to generate data for the crash reporter
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9819 |
A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9820 |
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11691 |
A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11692 |
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11693 |
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11694 |
A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11698 |
If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11703 |
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11704 |
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when…
|
Non notée
|
23 juil. 2019 |