Vulnerabilidades en mozilla
2453 resultadosCVE-2019-11742—A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> elEPSS 1.7%CVE-2019-9819—A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable cEPSS 1.7%CVE-2018-12382—The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before EPSS 1.7%CVE-2018-18509—A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even iEPSS 1.7%CVE-2020-12396—Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corEPSS 1.7%CVE-2019-11710—Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corEPSS 1.7%CVE-2017-5403—When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a EPSS 1.7%CVE-2021-38496—During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentialEPSS 1.7%CVE-2020-15677—By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to EPSS 1.7%CVE-2017-5377—A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable craEPSS 1.7%CVE-2018-18497—Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used withEPSS 1.6%CVE-2020-15667—When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading tEPSS 1.6%CVE-2018-5153—If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bouEPSS 1.6%CVE-2019-11759—An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an atEPSS 1.6%CVE-2017-7790—On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data canEPSS 1.6%CVE-2019-11740—Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these EPSS 1.6%CVE-2021-38508—By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validitEPSS 1.6%CVE-2019-9809—If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these resEPSS 1.6%CVE-2020-26976—When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have inteEPSS 1.6%CVE-2018-5165—In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though thEPSS 1.6%