Mozilla
Page 19 of 38 — Mozilla CVEs from a corpus of 3730, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7785 | Critical | 9.8 | 2018-06-11 | A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable… |
CVE-2017-7784 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potent… |
CVE-2017-7783 | High | 7.5 | 2018-06-11 | If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resulting modal prompt will… |
CVE-2017-7782 | Medium | 5.3 | 2018-06-11 | An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This a… |
CVE-2017-7781 | Medium | 5.9 | 2018-06-11 | An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINT_AT_INFINITY" when… |
CVE-2017-7780 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-7779 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2017-7778 | Critical | 9.8 | 2018-06-11 | A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized me… |
CVE-2017-7770 | Medium | 5.9 | 2018-06-11 | A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendered. This would allow… |
CVE-2017-7768 | Medium | 5.5 | 2018-06-11 | The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service tha… |
CVE-2017-7767 | Medium | 5.5 | 2018-06-11 | The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which run… |
CVE-2017-7766 | High | 7.8 | 2018-06-11 | An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service t… |
CVE-2017-7765 | High | 7.5 | 2018-06-11 | The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, t… |
CVE-2017-7764 | Medium | 5.3 | 2018-06-11 | Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as th… |
CVE-2017-7763 | Medium | 5.3 | 2018-06-11 | Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing at… |
CVE-2017-7762 | High | 7.5 | 2018-06-11 | When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domai… |
CVE-2017-7761 | Medium | 5.5 | 2018-06-11 | The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is combined with creation of… |
CVE-2017-7760 | High | 7.8 | 2018-06-11 | The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be… |
CVE-2017-7759 | High | 7.5 | 2018-06-11 | Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data… |
CVE-2017-7758 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerabilit… |
CVE-2017-7757 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a pote… |
CVE-2017-7756 | Critical | 9.8 | 2018-06-11 | A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable… |
CVE-2017-7755 | High | 7.8 | 2018-06-11 | The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged e… |
CVE-2017-7754 | High | 7.5 | 2018-06-11 | An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52… |
CVE-2017-7753 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbir… |
CVE-2017-7752 | High | 8.8 | 2018-06-11 | A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This resul… |
CVE-2017-7751 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox… |
CVE-2017-7750 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced i… |
CVE-2017-7749 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerabil… |
CVE-2017-5472 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no… |
CVE-2017-5471 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-5470 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-5469 | Critical | 9.8 | 2018-06-11 | Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45… |
CVE-2017-5468 | Critical | 9.1 | 2018-06-11 | An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manua… |
CVE-2017-5467 | High | 7.5 | 2018-06-11 | A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thu… |
CVE-2017-5466 | Medium | 6.1 | 2018-06-11 | If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "dat… |
CVE-2017-5465 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
CVE-2017-5464 | Critical | 9.8 | 2018-06-11 | During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruptio… |
CVE-2017-5463 | Medium | 5.3 | 2018-06-11 | Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addres… |
CVE-2017-5462 | Medium | 5.3 | 2018-06-11 | A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS libr… |
CVE-2017-5460 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potential… |
CVE-2017-5459 | Critical | 9.8 | 2018-06-11 | A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR… |
CVE-2017-5458 | Medium | 6.1 | 2018-06-11 | When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engine… |
CVE-2017-5456 | Critical | 9.8 | 2018-06-11 | A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and… |
CVE-2017-5455 | High | 7.5 | 2018-06-11 | The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability… |
CVE-2017-5454 | High | 7.5 | 2018-06-11 | A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker thr… |
CVE-2017-5453 | Medium | 4.3 | 2018-06-11 | A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. T… |
CVE-2017-5452 | Medium | 4.3 | 2018-06-11 | Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page elem… |
CVE-2017-5451 | Medium | 4.3 | 2018-06-11 | A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text dis… |
CVE-2017-5450 | High | 7.5 | 2018-06-11 | A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI. On Firefox for Android, the base domain is parsed incorrectly, making the re… |
CVE-2017-5449 | High | 7.5 | 2018-06-11 | A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects… |
CVE-2017-5448 | High | 8.6 | 2018-06-11 | An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media… |
CVE-2017-5447 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to… |
CVE-2017-5446 | Critical | 9.8 | 2018-06-11 | An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. Th… |
CVE-2017-5445 | High | 7.5 | 2018-06-11 | A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the readi… |
CVE-2017-5444 | High | 7.5 | 2018-06-11 | A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows fo… |
CVE-2017-5443 | Critical | 9.8 | 2018-06-11 | An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9… |
CVE-2017-5442 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affe… |
CVE-2017-5441 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thund… |
CVE-2017-5440 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objec… |
CVE-2017-5439 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulner… |
CVE-2017-5438 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially ex… |
CVE-2017-5436 | High | 8.8 | 2018-06-11 | An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issu… |
CVE-2017-5435 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable cr… |
CVE-2017-5434 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5433 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller whi… |
CVE-2017-5432 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5430 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that… |
CVE-2017-5429 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption a… |
CVE-2017-5428 | Critical | 9.8 | 2018-06-11 | An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to t… |
CVE-2017-5427 | Medium | 5.5 | 2018-06-11 | A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access put… |
CVE-2017-5426 | Medium | 5.3 | 2018-06-11 | On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and… |
CVE-2017-5425 | High | 7.5 | 2018-06-11 | The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subd… |
CVE-2017-5422 | High | 7.5 | 2018-06-11 | If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink i… |
CVE-2017-5421 | High | 7.5 | 2018-06-11 | A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loade… |
CVE-2017-5420 | Medium | 6.5 | 2018-06-11 | A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an… |
CVE-2017-5419 | High | 7.5 | 2018-06-11 | If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the ope… |
CVE-2017-5418 | Medium | 5.3 | 2018-06-11 | An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory… |
CVE-2017-5417 | Medium | 5.3 | 2018-06-11 | When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed locati… |
CVE-2017-5416 | High | 7.5 | 2018-06-11 | In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability… |
CVE-2017-5415 | Medium | 5.3 | 2018-06-11 | An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofin… |
CVE-2017-5414 | Medium | 5.5 | 2018-06-11 | The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disc… |
CVE-2017-5413 | Critical | 9.8 | 2018-06-11 | A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and Thunderbird < 52. |
CVE-2017-5412 | High | 7.5 | 2018-06-11 | A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox < 52 and Thunderbird < 52. |
CVE-2017-5411 | High | 7.5 | 2018-06-11 | A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while st… |
CVE-2017-5410 | Critical | 9.8 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for me… |
CVE-2017-5409 | Medium | 5.5 | 2018-06-11 | The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter throug… |
CVE-2017-5408 | Medium | 5.3 | 2018-06-11 | Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential informa… |
CVE-2017-5407 | Medium | 6.5 | 2018-06-11 | Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This c… |
CVE-2017-5406 | High | 7.5 | 2018-06-11 | A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulne… |
CVE-2017-5405 | Medium | 5.3 | 2018-06-11 | Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox < 52, F… |
CVE-2017-5404 | Critical | 9.8 | 2018-06-11 | A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
CVE-2017-5403 | Critical | 9.8 | 2018-06-11 | When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, res… |
CVE-2017-5402 | Critical | 9.8 | 2018-06-11 | A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This result… |
CVE-2017-5401 | Critical | 9.8 | 2018-06-11 | A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vu… |
CVE-2017-5400 | Critical | 9.8 | 2018-06-11 | JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vuln… |
CVE-2017-5399 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-5398 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2017-5397 | Critical | 9.8 | 2018-06-11 | The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibi… |
CVE-2017-5396 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. Th… |