Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions 92.0 through 98.0.2, which arises from a boundary error when the application processes HTML content. A remote attacker can create a...

Mozilla: Time-of-check time-of-use bug when verifying add-on signatures

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified, and Firefox...

Mozilla Thunderbird 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an Access Control Error vulnerability that originates when the browser stores files in the /tmp folder, which is accessible to all local users. An attacker could use this...

The vulnerability of the software interface for processing 3D graphics and computing with the WebGPU browser of Mozilla Firefox and Focus allows a perpetrator to execute arbitrary code.

The vulnerability of the software interface for processing 3D graphics and computing WebGPU by Mozilla Firefox and Focus relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability in the editing mode of Thunderbird email clients, as well as Firefox and Firefox ESR browsers, allows a perpetrator to initiate unauthorized recording and execution of arbitrary code in the target system.

The vulnerability of the editing mode in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is related to writing beyond the memory boundaries. Exploiting this vulnerability allows a remote attacker to initiate unauthorized writing operations and execute arbitrary code on...

The vulnerability of the Thunderbird email client’s user interface, as well as the Firefox and Firefox ESR browsers, stems from incorrect restrictions on the number of visible layers or frames. This allows attackers to exploit these incorrect restrictions to perform unauthorized actions.

The vulnerability of the Thunderbird email client’s user interface, as well as the Firefox and Firefox ESR browsers, is related to an incorrect limitation on the number of visible layers or frames, due to a mistake in adjusting the size of the pop-up window when requesting full-screen access...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, relates to the ability to bypass established security restrictions, allowing a perpetrator to circumvent the imposed security measures.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to the ability to bypass established security restrictions. Exploiting this vulnerability allows a remote attacker to circumvent these security measures...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, is related to incorrect operation limits within the memory buffer during the processing of HTML content. This allows an attacker to cause memory corruption and execute arbitrary code on the target system.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to incorrect restrictions on operations within the memory buffer during the processing of HTML content. Exploiting this vulnerability can allow an attacker to trigger memory corruption and...

UBUNTU-CVE-2021-4140

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client, related to insufficient input data validation, allows attackers to circumvent existing security restrictions.

The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially crafted link...

The vulnerability in the processing of CSP policies for Mozilla Firefox and Mozilla Thunderbird web browsers, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of CSP policies for Mozilla Firefox and Mozilla Thunderbird browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by embedding additional content within documents...

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

None None...

DEBIAN-CVE-2021-38507

The Opportunistic Encryption feature of HTTP2 RFC 8164 allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on port 80. However, if a second encrypted port on the same IP addre...

Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

Mozilla: External protocol handler parameters were unescaped

When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

Mozilla Firefox 跨站脚本漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A cross-site scripting vulnerability exists in Mozilla Firefox, which can be exploited by attackers to use the CSP sandbox command, where loaded documents can escape the scripting restrictions of the sandbox by...

The vulnerability in the SVG markup language implementation of browsers like Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability in the SVG markup language implementation of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning

The Mozilla Foundation Security Advisory describes this flaw as: Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing...

Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

DEBIAN-CVE-2021-38493

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 78.14,...