The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client arises from the mixing of symbols from the “Canadian Syllabics” block with symbols from other blocks, allowing attackers to perform spear-phishing attacks.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the mixing of symbols from the “Canadian Syllabics” block with symbols from other blocks. Exploiting this vulnerability allows a remote attacker to perform spam attacks...

The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability affects the implementation of HTTP/2 technology in browsers like Firefox, Firefox ESR, and the email client Thunderbird. This allows attackers to induce a service failure.

The vulnerability in the implementation of HTTP/2 technology in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to improper input cancellation during page generation, allows an attacker to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to improper input validation during the generation of web pages. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a key deletion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR 68.4.1, Thunderbird 68.4.1, and Firefox 72.0.1...

Vulnerability in Firefox web browsers, Firefox ESR, and Thunderbird email client, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

The vulnerability of WebGL buffer data in Firefox browsers (Firefox ESR), Thunderbird email client, arises from the possibility of operations occurring outside the buffer in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of WebGL buffer data in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to buffer overflows in certain graphics drivers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to security configuration errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to security configuration errors. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code by running a malicious executable file remotely...

The vulnerability of the TransportSecurityInfo component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the TransportSecurityInfo component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Skia library in browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the Skia library used by Firefox ESR, Firefox, and the Thunderbird email client is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Mozilla: Script injection within domain through inner window reuse

When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did...

Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)

An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...

The vulnerability in the implementation of the WebSockets technology in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a attacker to trigger a service failure.

The vulnerability in the implementation of the WebSockets technology in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to perform domain substitution.

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to defects in the Application Cache system’s functionality. Exploiting this vulnerability allows a malicious actor to replace domains using the “FALLBACK”...

Mozilla: Use-after-free while editing form elements (MFSA 2018-03)

A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.6 and Thunderbird 52.6...