Lucene search
+L

6 matches found

NVD
NVD
•added 2019/07/23 2:15 p.m.•22 views

CVE-2019-11716

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNameswindow. Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes t...

8.3CVSS8.4AI score0.01354EPSS
SaveExploits0References7
Mend
Mend
•added 2019/07/23 1:18 p.m.•1 views

CVE-2019-11716

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNameswindow. Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes t...

8.3CVSS0.01354EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2019/07/23 1:18 p.m.•53 views

CVE-2019-11716

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNameswindow. Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes t...

8.4AI score0.01354EPSS
SaveExploits0References7
CVE
CVE
•added 2019/07/23 1:18 p.m.•295 views

CVE-2019-11716

Mozilla Firefox contains a memory-safety sandbox issue described as: until explicitly accessed by script, window.globalThis is not enumerable, making it invisible to Object.getOwnPropertyNames(window) and potentially bypassable sandboxing. Affects Firefox versions prior to 68.0. The public docume...

8.3CVSS8.3AI score0.01354EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/23 12:00 a.m.•4 views

CVE-2019-11716: Improper Input Validation

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNameswindow. Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes t...

8.3CVSS5.9AI score0.01354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/07/09 12:00 a.m.•1 views

PT-2019-4557

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 68 Description The issue is related to the window.globalThis component in the Firefox browser, which is associated with an error in Object.getOwnPropertyNameswindow. This error allows an attacker to bypass the isolate...

8.3CVSS0.01354EPSS
SaveExploits0
Rows per page
Query Builder