| CVE-2019-9810 |
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9813 |
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for…
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18493 |
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18492 |
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18499 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh"…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18498 |
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18494 |
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12405 |
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12393 |
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12392 |
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12391 |
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of…
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12390 |
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2
|
Non notée
|
28 févr. 2019 |
| CVE-2018-12389 |
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2
|
Non notée
|
28 févr. 2019 |
| CVE-2018-18501 |
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4
|
Non notée
|
5 févr. 2019 |
| CVE-2018-18505 |
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to…
|
Non notée
|
5 févr. 2019 |
| CVE-2018-5188 |
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8
|
Non notée
|
18 oct. 2018 |
| CVE-2018-5187 |
Memory safety bugs present in Firefox 60 and Firefox ESR 60
|
Non notée
|
18 oct. 2018 |
| CVE-2018-5156 |
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12385 |
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12365 |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12374 |
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12364 |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12383 |
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12373 |
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML…
|
Non notée
|
18 oct. 2018 |
| CVE-2018-12363 |
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting…
|
Non notée
|
18 oct. 2018 |