The vulnerability of the Firefox browser, which allows a hacker to replace the address bar

The vulnerability of the Firefox browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the address bar by using left-to-right writing symbols, combined with writing them using right-to-left writing methods...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WebSocketChannel class in the Firefox WebSockets subsystem is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or trigger a service failure memory corruption using specially crafted packets that cause incorrect...

The vulnerability of the Firefox browser, which allows a hacker to obtain information about the last visited pages

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the last visited pages by using the Resource Timing API interface’s calls...

The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass existing access restrictions policies or read arbitrary files.

The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions policies or read arbitrary files by placing a specially crafted HTML document and links to it ...

Mozilla Firefox Password Acquisition Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly handle type changes in a session, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and discovering plaintext passwords...

Mozilla Firefox and Firefox ESR 'nsXULPopupManager::KeyDown' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'nsXULPopupManager::KeyDown' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB pa...

Mozilla Firefox and Firefox ESR 'nsNodeUtils::NativeAnonymousChildListChange' function memory mis-reference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'nsNodeUtils::NativeAnonymousChildListChange' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a...

CVE-2016-5266

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

DEBIAN-CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

CVE-2016-5260

Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file...

CVE-2016-5251

Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL...

Mozilla Firefox and Firefox ESR Same Origin Policy Bypass Vulnerability (CNVD-2016-06099)

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability in the 'nsNodeUtils::NativeAnonymousChildListChange' function in Mozilla Firefox and Firefox allows remote attackers to build malicious WEB pages that can be exploited to...

Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS UXSS attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same loca...

Mozilla: Favicon network connection persists when page is closed (MFSA 2016-62)

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses...

Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

UBUNTU-CVE-2016-5264

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG element that is mishandled duri...

The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack.

The vulnerability in Firefox’s Firefox browser, related to the HTMLSourceElement::BindToTree function, lies in insufficient data type constraints after a failed namespace check during the tree binding process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary JavaScript code

The vulnerability of Firefox lies in the use of Window.webidl for controlling access to docshell types, rather than page principal information. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code with Chrome privileges through content navigation, thereby...

The vulnerability of the Firefox browser allows a hacker to modify the address bar settings after entering a URL.

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the address bar settings remotely after entering a URL...

The vulnerability of the Firefox browser, which allows a remote attacker to bypass certificate verification

The vulnerability of the Firefox browser in handling alternative HTTP services allows a malicious actor to bypass the X.509 certificate verification for SSL servers by modifying the server address in the uri-host header of the HTTP/2 response...