Vulnerabilidades en mozilla
2453 resultadosCVE-2017-7803—When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorreEPSS 2.0%CVE-2017-7764—Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of bEPSS 2.0%CVE-2020-15673—Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corrEPSS 2.0%CVE-2017-7752—A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are EPSS 2.0%CVE-2017-7806—A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potenEPSS 1.9%CVE-2018-5112—Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but thisEPSS 1.9%CVE-2017-7846—It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website"EPSS 1.9%CVE-2020-12422—In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out oEPSS 1.9%CVE-2018-18495—WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. TEPSS 1.9%CVE-2017-5425—The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access tEPSS 1.9%CVE-2016-9896—Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability aEPSS 1.9%CVE-2018-5162—Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52EPSS 1.9%CVE-2017-7821—A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered withoutEPSS 1.9%CVE-2019-17005—The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the EPSS 1.9%CVE-2017-7780—Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effoEPSS 1.9%CVE-2020-26971—Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulneraEPSS 1.9%CVE-2017-5421—A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what siteEPSS 1.9%CVE-2020-15678—When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This EPSS 1.9%CVE-2017-7762—When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used forEPSS 1.9%CVE-2019-17008—When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vuEPSS 1.9%