Vulnerabilities in mozilla
2,453 resultsCVE-2018-12405—Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed eEPSS 3.2%CVE-2018-5144—An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerabilEPSS 3.2%CVE-2018-5154—A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially eEPSS 3.2%CVE-2017-5428—An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimenEPSS 3.2%CVE-2018-5183—Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer EPSS 3.2%CVE-2018-12366—An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This couEPSS 3.2%CVE-2018-12365—A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consentEPSS 3.2%CVE-2017-7792—A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifieEPSS 3.2%CVE-2018-12376—Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that wEPSS 3.1%CVE-2017-5376—Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51EPSS 3.1%CVE-2017-7845—A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. ThiEPSS 3.1%CVE-2018-12360—A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. EPSS 3.1%CVE-2017-5380—A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, FireEPSS 3.1%CVE-2018-12363—A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old documentEPSS 3.1%CVE-2018-5150—Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruptEPSS 3.1%CVE-2017-7753—An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerabilityEPSS 3.1%CVE-2017-5435—A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentiEPSS 3.1%CVE-2017-5432—A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability aEPSS 3.1%CVE-2017-7805—During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in EPSS 3.0%CVE-2017-7758—An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in useEPSS 3.0%