CVE-2020-26964

If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileges of the browser to read and interact with web content. The feature was implemented as a unix...

CVE-2020-26966

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

CVE-2020-26954

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

JerryScript has a binary vulnerability (CNVD-2020-72434)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72423)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

PT-2020-5251

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

PT-2020-5273

Name of the Vulnerable Software and Affected Versions Foxit Software’s PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. A specially crafted PDF document can...

JerryScript has a binary vulnerability (CNVD-2020-72431)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72424)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72404)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

PT-2020-5277

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

PT-2020-5276

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigge...

Google Chrome buffer error vulnerability

Google Chrome is a web browser from Google, an American company. Google chrome has a security vulnerability that stems from insufficient data validation in V8. A remote attacker can exploit the vulnerability to conduct a potential attack by leveraging heap corruption via a crafted HTML page...

Google Chrome Information Disclosure Vulnerability

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in versions prior to Google chrome 87.0.4280.88 that stems from the use of uninitialized V8...

PT-2020-5575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.88 Description The issue is related to an uninitialized use in the V8 JavaScript engine of Google Chrome, which can allow a remote attacker to obtain potentially sensitive information from process...

PT-2020-5734

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 87.0.4280.88 Description: The issue is related to insufficient data validation in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this by...

CVE-2020-26969

Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 83...

CVE-2020-26951

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...