Lucene search
+L
MozillaMost viewed

1596 matches found

Mozilla
Mozilla
added 2008/11/12 12:00 a.m.52 views

Information stealing via local shortcut files — Mozilla

Security researcher Liu Die Yu of TopsecTianRongXin reported that locally saved .url shortcut files could be used to read information stored in the local cache. An attacker could use this vulnerability to steal information from a victim's browser cache if they were able to get the victim to...

4.3CVSS1.5AI score0.10187EPSS
SaveExploits2References2Affected Software2
Mozilla
Mozilla
added 2026/06/02 12:00 a.m.51 views

Security Vulnerabilities fixed in Firefox 151.0.3 — Mozilla

CVE-2026-10701: Incorrect boundary conditions in the Graphics: Text component Reporter taiho kim Impact high References Bug 2038537 CVE-2026-10702: JIT miscompilation in the JavaScript Engine: JIT component Reporter Nebula Security Impact high References Bug 2040903...

7.5CVSS5.8AI score0.00856EPSS
SaveExploits1References2Affected Software1
Mozilla
Mozilla
added 2023/03/14 12:00 a.m.51 views

Security Vulnerabilities fixed in Firefox ESR 102.9 — Mozilla

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website...

8.8CVSS1AI score0.00798EPSS
SaveExploits0References6Affected Software1
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.51 views

Integer overflow in WebSockets during data buffering — Mozilla

Security researcher Samuel Groß reported an integer overflow error in WebSockets during data buffering on incoming packets when an allocated buffer is resized incorrectly. This results in the buffer array holding the data being shrunk, instead of grown, resulting in attacker controlled data being...

8.8CVSS2.5AI score0.04178EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.51 views

Favicon network connection can persist when page is closed — Mozilla

Security researcher Toni Huttunen reported that once the favicon is requested from a site, the remote server can keep the favicon network connection open even when the page is later closed. This allows a malicious site to continue to use this channel to send requests to the browser, leading to...

4.3CVSS1.1AI score0.01459EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.51 views

Information disclosure and local file manipulation through drag and drop — Mozilla

Security researcher Rafael Gieschke reported that file URIs dragged from a web page in Firefox to other software do not have their contents properly filtered before being passed to other programs, such as the local file manager. This can allow for the theft or manipulation of arbitrary local file...

8.1CVSS8.8AI score0.0166EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2016/04/26 12:00 a.m.51 views

Write to invalid HashMap entry through JavaScript.watch() — Mozilla

The CESG, the Information Security Arm of GCHQ, reported that the JavaScript .watch method could be used to overflow the 32-bit generation count of the underlying HashMap, resulting in a write to an invalid entry. Under the right conditions this write could lead to arbitrary code execution. The...

7.5CVSS0.7AI score0.02064EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/01/26 12:00 a.m.51 views

Out of Memory crash when parsing GIF format images — Mozilla

Security researcher Gustavo Grieco reported an out of memory crash when loading maliciously crafted GIF format images. Investigation of the issue determined that the root cause was an error in image parsing code during deinterlacing, leading to a potential integer overflow...

6.5CVSS7.8AI score0.01791EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/12/15 12:00 a.m.51 views

Crash with JavaScript variable assignment with unboxed objects — Mozilla

Security researcher Cajus Pollmeier reported that Firefox 41 was crashing during some Javascript variable assignments. The issue was caused by an implementation error with unboxed objects and property storing in the JavaScript engine. This error could result in a potentially exploitable crash whe...

6.8CVSS6.6AI score0.03492EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/11/03 12:00 a.m.51 views

Information disclosure through NTLM authentication — Mozilla

Security researcher Tim Brown reported that Firefox discloses the hostname and possibly the Windows domain through NTLM-based HTTP authentication when sending type 3 messages as part of the authentication exchange. This is because the Workstation field is populated with the hostname of the system...

4.3CVSS8.7AI score0.01837EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2015/07/02 12:00 a.m.51 views

Use-after-free in workers while using XMLHttpRequest — Mozilla

Security researcher Looben Yang used the Address Sanitizer tool to discover two related use-after-free vulnerabilities that occur when using XMLHttpRequest in concert with either shared or dedicated workers. These errors occur when the XMLHttpRequest object is attached to a worker but that object...

10CVSS5.4AI score0.06181EPSS
SaveExploits0References4Affected Software4
Mozilla
Mozilla
added 2015/03/20 12:00 a.m.51 views

Privilege escalation through SVG navigation — Mozilla

Security researcher Mariusz Mlynski reported, through HP Zero Day Initiative's Pwn2Own contest, a method to run arbitrary scripts in a privileged context. This bypassed the same-origin policy protections by using a flaw in the processing of SVG format content navigation...

7.5CVSS8.9AI score0.03152EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/01/13 12:00 a.m.51 views

Read of uninitialized memory in Web Audio — Mozilla

Security researcher Holger Fuhrmannek used the used the Address Sanitizer tool to discover a crash in Web Audio while manipulating timelines. This allowed for the a small block of memory with an uninitialized pointer to be read. The crash it not exploitable...

5CVSS8.8AI score0.02389EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2014/12/02 12:00 a.m.51 views

XBL bindings accessible via improper CSS declarations — Mozilla

Security researcher Cody Crews reported a method to trigger chrome level XML Binding Language XBL bindings through web content. This was possible because some chrome accessible CSS stylesheets had their primary namespace improperly declared. When this occurred, it was possible to use these...

6.8CVSS8.9AI score0.01802EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.51 views

Buffer overflow during CSS manipulation — Mozilla

Using the Address Sanitizer tool, security researcher Atte Kettunen from OUSPG discovered a buffer overflow when making capitalization style changes during CSS parsing. This can cause a crash that is potentially exploitable...

7.5CVSS9.3AI score0.05087EPSS
SaveExploits0References2Affected Software4
Mozilla
Mozilla
added 2014/10/14 12:00 a.m.51 views

Key pinning bypasses — Mozilla

Mozilla developer Patrick McManus reported a method to use SPDY or HTTP/2 connection coalescing to bypass key pinning on different sites that resolve to the same IP address.This could allow the use of a fraudulent certificate when a saved pin for that subdomain should have prevented the connectio...

8.7AI score
SaveExploits0References4Affected Software2
Mozilla
Mozilla
added 2014/04/29 12:00 a.m.51 views

Privilege escalation through Web Notification API — Mozilla

Security researcher Mariusz Mlynski discovered an issue where sites that have been given notification permissions by a user can bypass security checks on source components for the Web Notification API. This allows for script to be run in a privileged context through notifications, leading to...

9.3CVSS8.7AI score0.03766EPSS
SaveExploits1References2Affected Software4
Mozilla
Mozilla
added 2014/04/29 12:00 a.m.51 views

Web Audio memory corruption issues — Mozilla

Security researcher Ash reported an out of bounds read issue with Web Audio. This issue could allow for web content to trigger crashes that are potentially exploitable...

9.3CVSS8.8AI score0.05423EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2014/03/18 12:00 a.m.51 views

onbeforeunload and Javascript navigation DOS — Mozilla

Security researchers Tim Philipp Schäfers and Sebastian Neef, the team of Internetwache.org, reported a mechanism using JavaScript onbeforeunload events with page navigation to prevent users from closing a malicious page's tab and causing the browser to become unresponsive. This allows for a deni...

5CVSS8.6AI score0.0364EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2014/02/04 12:00 a.m.51 views

Firefox default start page UI content invocable by script — Mozilla

Yazan Tommalieh discovered a flaw that once users have viewed the default Firefox start page about:home, subsequent pages they navigate to in that same tab could use script to activate the buttons that were on the about:home page. Most of these simply open Firefox dialogs such as Settings or...

4.3CVSS7.6AI score0.01925EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2013/12/10 12:00 a.m.51 views

Segmentation violation when replacing ordered list elements — Mozilla

Security researchers Tyson Smith and Jesse Schwartzentruber of the BlackBerry Security Automated Analysis Team used the Address Sanitizer tool while fuzzing to discover a mechanism where inserting an ordered list into a document through script could lead to a potentially exploitable crash that ca...

10CVSS2AI score0.11076EPSS
SaveExploits2References2Affected Software4
Mozilla
Mozilla
added 2013/06/25 12:00 a.m.51 views

Memory corruption found using Address Sanitizer — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution...

10CVSS2.1AI score0.05397EPSS
SaveExploits0References6Affected Software5
Mozilla
Mozilla
added 2013/05/14 12:00 a.m.51 views

Privileged access for content level constructor — Mozilla

Security researcher Cody Crews reported a method to call a content level constructor that allows for this constructor to have chrome privileged access. This affects chrome object wrappers COW and allows for write actions on objects when only read actions should be allowed. This can lead to...

4.3CVSS7.8AI score0.10893EPSS
SaveExploits4References2Affected Software4
Mozilla
Mozilla
added 2013/05/14 12:00 a.m.51 views

File input control has access to full path — Mozilla

Mozilla security researcher mozbugra4 reported a mechanism to exploit the control when set to the file type in order to get the full path. This can lead to information leakage and could be combined with other exploits to target attacks on the local file system...

4.3CVSS5.5AI score0.01041EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2013/04/02 12:00 a.m.51 views

Out-of-bounds write in Cairo library — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover an out-of-bounds write in Cairo graphics library. When certain values are passed to it during rendering, Cairo attempts to use negative boundaries or sizes for boxes, leading t...

6.8CVSS2.4AI score0.03941EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2013/01/08 12:00 a.m.51 views

Memory corruption in XBL with XML bindings containing SVG — Mozilla

Security researcher Sviatoslav Chagaev reported that when using an XBL file containing multiple XML bindings with SVG content, a memory corruption can occur. In concern with remote XUL, this can lead to an exploitable crash...

9.3CVSS1.7AI score0.06623EPSS
SaveExploits1References2Affected Software5
Mozilla
Mozilla
added 2013/01/08 12:00 a.m.51 views

Address space layout leaked in XBL objects — Mozilla

Mozilla security researcher Jesse Ruderman discovered that using the toString function of XBL objects can lead to inappropriate information leakage by revealing the address space layout instead of just the ID of the object. This layout information could potentially be used to bypass ASLR and othe...

4.3CVSS1.9AI score0.01998EPSS
SaveExploits1References2Affected Software5
Mozilla
Mozilla
added 2012/11/20 12:00 a.m.51 views

Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer — Mozilla

Security researcher miaubiz used the Address Sanitizer tool to discover a series critically rated of use-after-free, buffer overflow, and memory corruption issues in shipped software. These issues are potentially exploitable, allowing for remote code execution. We would also like to thank miaubiz...

10CVSS3AI score0.08528EPSS
SaveExploits4References8Affected Software5
Mozilla
Mozilla
added 2012/08/28 12:00 a.m.51 views

Installer will launch incorrect executable following new installation — Mozilla

Security researcher Masato Kinugawa reported that if a crafted executable is placed in the root partition on a Windows file system, the Firefox and Thunderbird installer will launch this program after a standard installation instead of Firefox or Thunderbird, running this program with the user's...

6.9CVSS3.8AI score0.00296EPSS
SaveExploits1References2Affected Software5
Mozilla
Mozilla
added 2012/03/13 12:00 a.m.51 views

Escalation of privilege with Javascript: URL as home page — Mozilla

Security researcher Mariusz Mlynski reported that an attacker able to convince a potential victim to set a new home page by dragging a link to the "home" button can set that user's home page to a javascript: URL. Once this is done the attacker's page can cause repeated crashes of the browser,...

6.8CVSS1AI score0.02772EPSS
SaveExploits1References4Affected Software5
Mozilla
Mozilla
added 2011/03/01 12:00 a.m.51 views

Recursive eval call causes confirm dialogs to evaluate to true — Mozilla

Security researcher Zach Hoffman reported that a recursive call to eval wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate t...

6.8CVSS1.9AI score0.01823EPSS
SaveExploits1References2Affected Software2
Mozilla
Mozilla
added 2010/12/09 12:00 a.m.51 views

Crash and remote code execution using HTML tags inside a XUL tree — Mozilla

Security researcher wushi of team509 reported that when a XUL tree had an HTML element nested inside a element then code attempting to display content in the XUL tree would incorrectly treat the element as a parent node to tree content underneath it resulting in incorrect indexes being calculated...

9.3CVSS1AI score0.04812EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2010/12/09 12:00 a.m.51 views

Incomplete fix for CVE-2010-0179 — Mozilla

Mozilla security researcher mozbugra4 reported that the fix for CVE-2010-0179 could be circumvented permitting the execution of arbitrary JavaScript with chrome privileges...

5.1CVSS2.2AI score0.03275EPSS
SaveExploits0References3Affected Software2
Mozilla
Mozilla
added 2010/09/07 12:00 a.m.51 views

UTF-7 XSS by overriding document charset using <object> type attribute — Mozilla

Security researchers David Huang and Collin Jackson of Carnegie Mellon University CyLab Silicon Valley campus reported that the type attribute of an tag can override the charset of a framed HTML document, even when the document is included across origins. A page could be constructed containing su...

4.3CVSS9AI score0.02107EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2010/06/22 12:00 a.m.51 views

Content-Disposition: attachment ignored if Content-Type: multipart also present — Mozilla

Security researcher Ilja van Sprundel of IOActive reported that the Content-Disposition: attachment HTTP header was ignored when Content-Type: multipart was also present. This issue could potentially lead to XSS problems in sites that allow users to upload arbitrary files and specify a Content-Ty...

4.3CVSS1.2AI score0.0207EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2022/07/26 12:00 a.m.50 views

Security Vulnerabilities fixed in Firefox ESR 91.12 — Mozilla

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected...

7.5CVSS4.2AI score0.00694EPSS
SaveExploits0References2Affected Software1
Mozilla
Mozilla
added 2020/10/21 12:00 a.m.50 views

Security Vulnerabilities fixed in Thunderbird 78.4 — Mozilla

A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. Mozilla developers and community members Jason Kratzer, Simon Giesecke, Philipp, and Christian Holler reported memory safety bugs present in...

9.8CVSS2.3AI score0.02674EPSS
SaveExploits0References3Affected Software1
Mozilla
Mozilla
added 2020/06/30 12:00 a.m.50 views

Security Vulnerabilities fixed in Firefox ESR 68.10 — Mozilla

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash.Note: this issue only affects Firefox on ARM64 platforms. Manipulating individual parts of a URL object could have caused an...

9.3CVSS1AI score0.03034EPSS
SaveExploits2References5Affected Software1
Mozilla
Mozilla
added 2016/08/02 12:00 a.m.50 views

Stack underflow during 2D graphics rendering — Mozilla

Georg Koppen of the Tor Project used the Address Sanitizer tool to discover a stack buffer underflow when calculating clipping regions in 2D graphics. This results in a potentially exploitable crash...

8.8CVSS2.9AI score0.03065EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2016/01/26 12:00 a.m.50 views

Addressbar spoofing attacks — Mozilla

Security researcher Jordi Chancel reported two issues involving addressbar spoofing...

7.4CVSS7.1AI score0.01798EPSS
SaveExploits0References4Affected Software1
Mozilla
Mozilla
added 2016/01/26 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:44.0 / rv:38.6) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

10CVSS3.1AI score0.05992EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/11/03 12:00 a.m.50 views

Buffer overflow during image interactions in canvas — Mozilla

Security researcher Looben Yang reported a buffer overflow in the JPEGEncoder function during script interactions with a canvas element. This is caused by a race condition and incorrectly matched sizes following image interactions. This leads to a potentially exploitable crash...

6.8CVSS9.4AI score0.0311EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.50 views

Memory safety errors in libGLES in the ANGLE graphics library — Mozilla

Security researcher Ronald Crane reported two issues in the libGLES portions of the ANGLE graphics library, used for WebGL and OpenGL content on Windows systems. The first of these is a missing bounds check leading to memory safety errors when manipulating shaders which could result in the writin...

7.5CVSS6.7AI score0.04184EPSS
SaveExploits0References4Affected Software4
Mozilla
Mozilla
added 2015/09/22 12:00 a.m.50 views

Crash when using debugger with SavedStacks in JavaScript — Mozilla

Security researcher Spandan Veggalam reported a crash while using the debugger API with SavedStacks in JavaScript. This crash can only occurs when the debugger is in use but may be potentially exploitable...

5.1CVSS6.2AI score0.03211EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/08/11 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:40.0 / rv:38.2) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

10CVSS8.4AI score0.06963EPSS
SaveExploits0References3Affected Software5
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.50 views

Use-after-free due to Media Decoder Thread creation during shutdown — Mozilla

Security researchers Tyson Smith and Jesse Schwartzentruber reported a use-after-free during the shutdown process. This was caused by a race condition when media decoder threads are created during the shutdown process in some circumstances. This leads to a potentially exploitable crash when...

6.8CVSS8.9AI score0.0218EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.50 views

Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

7.5CVSS9.8AI score0.04875EPSS
SaveExploits0References2Affected Software5
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

Malicious WebGL content crash when writing strings — Mozilla

Security researcher Daniele Di Proietto discovered that when WebGL content crafted in a specific manner wrote strings, it would cause a crash when this content was run...

5CVSS8.8AI score0.02013EPSS
SaveExploits0References2Affected Software3
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

TLS TURN and STUN connections silently fail to simple TCP connections — Mozilla

Security researcher Alexander Kolesnik reported while the Mozilla platform does not yet support TLS connections to TURN and STUN servers, the WebRTC implementation would accept turns: and stuns: URIs and then attempt plaintext connections to the servers when these were used. This can lead to...

4.3CVSS8.9AI score0.01259EPSS
SaveExploits0References2Affected Software2
Mozilla
Mozilla
added 2015/02/24 12:00 a.m.50 views

Buffer overflow during CSS restyling — Mozilla

Security researcher Atte Kettunen used the Address Sanitizer tool to discover an out-of-bounds read during the application of restyling and reflowing changes of web content using CSS. This results in a potentially exploitable crash...

6.8CVSS8.8AI score0.03381EPSS
SaveExploits0References2Affected Software2
Total number of security vulnerabilities1596