| CVE-2017-7824 |
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content
|
Non notée
|
11 juin 2018 |
| CVE-2017-7804 |
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7814 |
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7785 |
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM
|
Non notée
|
11 juin 2018 |
| CVE-2017-7823 |
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7830 |
The Resource Timing API incorrectly revealed navigations in cross-origin iframes
|
Non notée
|
11 juin 2018 |
| CVE-2017-7765 |
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7755 |
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7803 |
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored
|
Non notée
|
11 juin 2018 |
| CVE-2017-7793 |
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7829 |
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient
|
Non notée
|
11 juin 2018 |
| CVE-2017-7764 |
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7754 |
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations
|
Non notée
|
11 juin 2018 |
| CVE-2017-7802 |
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element
|
Non notée
|
11 juin 2018 |
| CVE-2017-7828 |
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7792 |
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7763 |
Default fonts on OS X display some Tibetan characters as whitespace
|
Non notée
|
11 juin 2018 |
| CVE-2017-7753 |
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data
|
Non notée
|
11 juin 2018 |
| CVE-2017-7782 |
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7801 |
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7791 |
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7819 |
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7810 |
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3
|
Non notée
|
11 juin 2018 |
| CVE-2017-7752 |
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages…
|
Non notée
|
11 juin 2018 |
| CVE-2017-7800 |
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the…
|
Non notée
|
11 juin 2018 |