11 matches found
CVE-2026-92800
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected...
CVE-2026-92800 Docs before 5.4.1 Stale Collaboration Session After Access Revocation
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected...
CVE-2026-92800
Docs (by suitenumerique) versions before 5.4.1 fail to properly revoke websocket collaboration connections when access is revoked at parent documents. This allows an attacker whose access has been revoked to retain real-time read and write access to sub-documents through stale websocket sessions ...
SUSE CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
Authentication Bypass
firefox is vulnerable to authentication bypass. The vulnerability exists because certain pages do not have their FeaturePolicy fully initialized which allows an attacker to bypass the leaked device permissions into untrusted sub documents...
Denial Of Service (DoS)
Firefox ESR and Thunderbird are vulnerable to denial of service DoS attacks. An attacker is able to crash the application by exploiting the vulnerable EnumerateSubDocuments function while adding or removing sub-documents...
CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
