Mozilla -- cross-origin leak attack

[email protected] reports: Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks...

CVE-2022-22752

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...

FreeBSD : Mozilla -- Information leak (9fa8c4a2-2e85-11f0-a989-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9fa8c4a2-2e85-11f0-a989-b42e991fc52e advisory. [email protected] reports: An attacker with control over a content process could potentially leverag...

FreeBSD : Mozilla -- null pointer dereference (ba6361be-1887-11f0-a8ce-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ba6361be-1887-11f0-a8ce-b42e991fc52e advisory. [email protected] reports: A null pointer dereference may have inadvertently occurred in pk12util, a...

FreeBSD : mozilla -- double free error (b65b1217-1887-11f0-a8ce-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b65b1217-1887-11f0-a8ce-b42e991fc52e advisory. [email protected] reports: A double-free issue could have occurred in secpkcs7decoderstartdecrypt wh...

FreeBSD : Mozilla -- use-after-free after failed memory allocation (ee407762-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ee407762-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: Assuming a controlled failed memory allocation, an attacker could have...

FreeBSD : Mozilla -- DoS via segmentation fault (f38dd0f1-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f38dd0f1-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: When segmenting specially crafted text, segmentation would corrupt memory...

FreeBSD : mozilla -- multiple vulnerabilities (1a67144d-0d86-11f0-8542-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1a67144d-0d86-11f0-8542-b42e991fc52e advisory. [email protected] reports: An inconsistent comparator in xslt/txNodeSorter could have...

Mozilla -- privilege escalation attack

[email protected] reports: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...

Mozilla -- use-after-free error

[email protected] reports: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

mozilla -- use-after-free in WebTransport connection

[email protected] reports: It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash...

CVE-2025-1414

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory: Memory safety bugs present in Firefox 135. Some of these bugs show evidence of memory corruption and we presume that with enough effort, some of these could be exploited to run arbitrary code...

firefox: thunderbird: Use-after-free in Custom Highlight

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash...

FreeBSD : mozilla -- multiple vulnerabilities (e54a1413-e539-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e54a1413-e539-11ef-a845-b42e991fc52e advisory. [email protected] reports: An attacker could have caused a use-after-free via crafted XSLT...

FreeBSD : mozilla -- multiple vulnerabilities (20485d27-e540-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 20485d27-e540-11ef-a845-b42e991fc52e advisory. [email protected] reports: A bug in WebAssembly code generation could have lead to a crash...

firefox: thunderbird: WebChannel APIs susceptible to confused deputy attack

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to...

Mozilla -- use-after-free after failed memory allocation

[email protected] reports: Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash...

Mozilla -- redirection to insecure site

[email protected] reports: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

Mozilla -- DoS via segmentation fault

[email protected] reports: When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash...

firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs are present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of...