| CVE-2019-11705 |
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11706 |
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11707 |
Exploitée
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
|
8.8
Élevée
|
23 juil. 2019 |
| CVE-2019-11708 |
Exploitée
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
|
10.0
Critique
|
23 juil. 2019 |
| CVE-2019-11709 |
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11711 |
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11712 |
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11713 |
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11715 |
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11717 |
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11719 |
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11729 |
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11730 |
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9795 |
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9794 |
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9793 |
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9792 |
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9801 |
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9791 |
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9790 |
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9788 |
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9796 |
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh…
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18513 |
A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18512 |
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18509 |
A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid…
|
Non notée
|
26 avr. 2019 |