Design/Logic Flaw

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

CVE-2020-12424

Vulnerability CVE-2020-12424 affects Firefox earlier than 78, where a WebRTC permission prompt could be bypassed if a URI from the content process was untrusted and potentially the origin that had been previously granted permission. Connected advisories and vendor updates indicate this issue was ...

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2020-43766)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in WebRTC VideoBroadcaster in versions of Mozilla Firefox prior to 78. An attacker can exploit this vulnerability to cause memory corruption and possibl...

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

Security Vulnerabilities fixed in Firefox 78 — Mozilla

When %2F was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. A VideoStreamEncoder may have been freed in a race...

RHEL 6 : chromium-browser (RHSA-2020:2544)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 83.0.4103.97. Security Fixes:...

CVE-2020-14033

janus-gateway (Janus WebRTC Server)

Meetecho Janus Code Issue Vulnerability (CNVD-2020-34717)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A code issue vulnerability exists in Meetecho Janus. The vulnerability stems from an improperly designed or implemented code development process for a web system or product. Detailed vulnerability details are not availab...

Meetecho Janus Buffer Overflow Vulnerability

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A buffer overflow vulnerability exists in Meetecho Janus. A remote attacker could exploit this vulnerability to execute arbitrary code or cause the application to crash...

CVE-2020-13901

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpmerge in sdp.c has a stack-based buffer overflow...

CVE-2020-13900

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdppreparse in sdp.c has a NULL pointer dereference...

UBUNTU-CVE-2020-13899

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusprocessincomingrequest in janus.c discloses information from uninitialized stack memory...

CVE-2020-13899

CVE-2020-13899 affects janus-gateway (Janus WebRTC Server) up to version 0.10.0. The vulnerability is in janus_process_incoming_request (janus.c), which discloses information from uninitialized stack memory. This constitutes an information disclosure issue with potential partial confidentiality i...

CVE-2020-13898

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janussdpprocess in sdp.c has a NULL pointer dereference...

CVE-2020-13898

CVE-2020-13898 affects janus-gateway (Janus WebRTC Server) up to v0.10.0. The vulnerability is a NULL pointer dereference in janus_sdp_process (sdp.c). This implies potential crash or denial of service on handling SDP, with no public exploit details provided in the supplied documents. Connected s...

Microsoft Edge (Chromium) < 83.0.478.37 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 83.0.478.37. It is, therefore, affected by multiple vulnerabilities: - A use after free in media in Microsoft Edge Chromium allowed a remote attacker who had compromised the renderer process to potentially...

About the security content of Safari 13.1.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...