Vulnerabilities in mozilla
2,453 resultsCVE-2017-7847—Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.EPSS 1.6%CVE-2020-15676—Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed aEPSS 1.6%CVE-2018-5136—A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policyEPSS 1.6%CVE-2018-5172—The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewinEPSS 1.6%CVE-2016-5299—A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for FirEPSS 1.6%CVE-2016-9061—A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keyEPSS 1.6%CVE-2018-5157—Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This couldEPSS 1.6%CVE-2018-18512—A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediatelyEPSS 1.6%CVE-2017-5031—A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory reEPSS 1.6%CVE-2020-12425—Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential infoEPSS 1.6%CVE-2020-35113—Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corrEPSS 1.6%CVE-2018-12399—When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registeEPSS 1.6%CVE-2018-12400—In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows EPSS 1.6%CVE-2017-7813—Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usuEPSS 1.6%CVE-2018-5164—Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME typeEPSS 1.6%CVE-2020-26960—If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potenEPSS 1.6%CVE-2019-11691—A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called aEPSS 1.6%CVE-2017-7831—A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_exposedProps_" mechanism oEPSS 1.6%CVE-2018-5141—A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user intEPSS 1.6%CVE-2018-18494—A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirecEPSS 1.5%