The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the lack of protective measures for website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for handling web page structures. Exploiting these vulnerabilities allows a remote attacker to perform cross-site scripting attacks by redirecting users to the...

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input data validation, allowing attackers to compromise the integrity of information.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a remote attacker to compromise the integrity of information...

The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client involves an operation that goes beyond the allowed limits of the data buffer. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability affects the implementation of HTTP/2 technology in browsers like Firefox, Firefox ESR, and the email client Thunderbird. This allows attackers to induce a service failure.

The vulnerability in the implementation of HTTP/2 technology in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a key deletion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to improper input cancellation during page generation, allows an attacker to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to improper input validation during the generation of web pages. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR 68.4.1, Thunderbird 68.4.1, and Firefox 72.0.1...

Vulnerability in Firefox web browsers, Firefox ESR, and Thunderbird email client, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

The vulnerability of WebGL buffer data in Firefox browsers (Firefox ESR), Thunderbird email client, arises from the possibility of operations occurring outside the buffer in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of WebGL buffer data in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to buffer overflows in certain graphics drivers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to security configuration errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to security configuration errors. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code by running a malicious executable file remotely...

The vulnerability of the TransportSecurityInfo component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the TransportSecurityInfo component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Skia library in browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the Skia library used by Firefox ESR, Firefox, and the Thunderbird email client is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Mozilla: Script injection within domain through inner window reuse

When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did...

Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)

An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...