Lucene search
K

13 matches found

NVD
NVD
added 2025/09/04 7:15 p.m.2 views

CVE-2025-48522

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00013EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.3 views

CVE-2025-48522

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00013EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.24 views

Mozilla Firefox Security Advisory (MFSA2016-77) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS7.9AI score0.00398EPSS
Exploits0References3
OSV
OSV
added 2018/06/11 9:29 p.m.2 views

CVE-2018-5133

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

6.5CVSS7.3AI score0.00639EPSS
Exploits0References6
OSV
OSV
added 2018/03/14 12:0 a.m.0 views

UBUNTU-CVE-2018-5133

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

6.5CVSS7.3AI score0.00639EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2016/09/02 12:0 a.m.53 views

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2195-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...

9.8CVSS7.2AI score0.36245EPSS
Exploits3References35
OSV
OSV
added 2016/08/05 12:39 p.m.0 views

USN-3044-1 firefox vulnerabilities

Gustavo Grieco discovered an out-of-bounds read during XML parsing in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or obtain sensitive information. CVE-2016-0718...

9.8CVSS7.4AI score0.02827EPSS
Exploits6References23
Ubuntu
Ubuntu
added 2016/08/05 12:39 p.m.63 views

USN-3044-1: Firefox vulnerabilities

Gustavo Grieco discovered an out-of-bounds read during XML parsing in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or obtain sensitive information. CVE-2016-0718...

9.8CVSS8.2AI score0.02827EPSS
Exploits6
NVD
NVD
added 2016/08/05 1:59 a.m.17 views

CVE-2016-2837

Heap-based buffer overflow in the ClearKey Content Decryption Module CDM in the Encrypted Media Extensions EME API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media...

6.8CVSS8.3AI score0.00398EPSS
Exploits0References12
OSV
OSV
added 2016/08/05 1:59 a.m.6 views

CVE-2016-2837

Heap-based buffer overflow in the ClearKey Content Decryption Module CDM in the Encrypted Media Extensions EME API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media...

6.3CVSS9.8AI score
Exploits0References12
OSV
OSV
added 2016/08/05 1:59 a.m.1 views

DEBIAN-CVE-2016-2837

Heap-based buffer overflow in the ClearKey Content Decryption Module CDM in the Encrypted Media Extensions EME API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media...

6.3CVSS8.6AI score0.00398EPSS
Exploits0References1
ArchLinux
ArchLinux
added 2016/08/05 12:0 a.m.44 views

firefox: multiple issues

CVE-2016-0718 arbitrary code execution Out-of-bounds read during XML parsing in Expat library. - CVE-2016-2830 information disclosure Favicon network connection can persist when page is closed. - CVE-2016-2835 CVE-2016-2836 arbitrary code execution Mozilla developers and community members...

7.5CVSS0.9AI score0.02827EPSS
Exploits6References22
ThreatPost
ThreatPost
added 2015/05/12 3:39 p.m.16 views

Firefox 38 Fixes 13 Flaws, Ships With DRM Support

Mozilla has fixed 13 security flaws in Firefox 38, including five critical vulnerabilities. The new version of the browser also includes a feature that enables the use of DRM-enabled video content in Firefox, a decision that comes with some controversy. DRM digital rights management, the generic...

1.3AI score
Exploits0References4
Rows per page
Query Builder