Microsoft Edge - Sandbox Escape

Microsoft Edge - Sandbox Escape 1. Content process - Privileged content process firststage.js When spawning a new Edge content process, its privilege is determined by its URL. This URL check is performed by the LCIEUrlPolicy::GetPICForPrivilegedInternalPage method in eModel.dll. The method calls...

CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...

MIT Kerberos 5 Integer Overflow Vulnerability

MIT Kerberos 5 also known as krb5 is the United States Massachusetts Institute of Technology MIT developed a set of network authentication protocols, which uses a client/server structure, and the client and server side can be authenticated to each other i.e., double authentication to prevent...

Multiple Local Elevation of Privilege Vulnerabilities in Intel Trusted Execution Engine

Intel Trusted Execution Engine Firmware is a trusted execution engine firmware product. Intel Trusted Execution Engine has multiple local elevation of privilege vulnerabilities. An attacker could exploit this vulnerability to access privileged content...

CVE-2017-5710

Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecified vector...

UBUNTU-CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...

CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header MFSA 2015-43 Loading privileged content through Reader mode...

Windows can retain access to privileged content on navigation to unprivileged pages — Mozilla

Mozilla developer Bobby Holley reported that windows created to hold privileged UI content retained access to privileged internal methods if later navigated to unprivileged content. If a separate flaw was found that allowed for web content to reference these privileged windows, an attacker could...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1142-1)

MozillaFirefox was updated to Firefox 22.0 bnc825935 Following security issues were fixed : - MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer - MFSA...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1141-1)

MozillaThunderbird was updated to Thunderbird 17.0.7 bnc825935 Security issues fixed : - MFSA 2013-49/CVE-2013-1682 Miscellaneous memory safety hazards - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer - MFSA 2013-51/CVE-2013-1687 bmo863933,...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1180-1)

seamonkey was updated to 2.19 bnc825935 to fix bugs and security issues. Security issues fixed : - MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer - MFSA...

(Pwn2Own) Mozilla Firefox Privileged Content Loading Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

openSUSE: Security Advisory for regular (openSUSE-SU-2013:1140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for MozillaThunderbird openSUSE-SU-2013:1141-1 (MozillaThunderbird)

Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201311411.nasl 8542 2018-01-26 06:57:28Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2013:1141-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

SuSE Update for update openSUSE-SU-2013:1176-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201311761.nasl 8542 2018-01-26 06:57:28Z teissa $ SuSE Update for update openSUSE-SU-2013:1176-1 update Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for MozillaFirefox openSUSE-SU-2013:1142-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201311421.nasl 8456 2018-01-18 06:58:40Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2013:1142-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

SuSE Update for xulrunner openSUSE-SU-2013:1143-1 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test $Id: gbsuse201311431.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for xulrunner openSUSE-SU-2013:1143-1 xulrunner Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

update to SeaMonkey 2.19 (important)

Seamonkey was updated to version 2.19 MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer MFSA 2013-51/CVE-2013-1687 bmo863933, bmo866823 Privileged content access and...

MozillaFirefox: Update to Firefox 22.0 release (important)

MozillaFirefox was updated to Firefox 22.0 bnc825935 Following security issues were fixed: MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer MFSA 2013-51/CVE-2013-1687...