165 matches found
CVE-2018-5124: Improper Neutralization of Input During Web Page Generation
Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1...
Information disclosure
Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process...
CVE-2018-18346
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
CVE-2018-18346
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
Hardcoded credentials
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
CVE-2018-18346
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
Arbitrary file deletion
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox 56...
CVE-2017-7812
CVE-2017-7812 is confirmed in the provided Open Source vulnerability set. Affected: Firefox versions prior to 56.0. Issue: dragging web content onto parts of the browser UI (e.g., the tab bar) allows links to open that would normally be disallowed, enabling a malicious page to trigger opening a l...
CVE-2018-6147
Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process...
PT-2018-3258
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue is related to the lack of secure text entry mode in the Browser UI, allowing a local attacker to obtain potentially sensitive information from process memory via a local proces...
CVE-2018-5124
Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1...
Mozilla Firefox Security Advisories (MFSA2018-05, MFSA2018-05) - Mac OS X
Mozilla Firefox is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-5124
Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1...
Arbitrary code execution through unsanitized browser UI — Mozilla
Mozilla developer Johann Hofmann reported that unsanitized output in the browser UI can lead to arbitrary code execution...
firefox -- Arbitrary code execution through unsanitized browser UI
The Mozilla Foundation reports: Mozilla developer Johann Hofmann reported that unsanitized output in the browser UI can lead to arbitrary code execution...
PT-2018-16783
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 58.0.1 Description The issue is related to unsanitized output in the browser UI, which leaves HTML tags in place and can result in arbitrary code execution. Recommendations For versions prior to 58.0.1, update to...
Security vulnerabilities fixed in Firefox 56 — Mozilla
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake addre...
PT-2017-16502
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 52 Thunderbird versions prior to 52 Description A denial of service issue exists where a malicious site can trigger a modal authentication prompt repeatedly, causing the browser UI to become non-responsive and requiri...
