Browse CVEs

HIGH 7.8 CVE-2018-12233 In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twic… Linux Kernel 3.16.58 / 3.18.118+ Fix from $1,9502018-06-12 HIGH 7.5 CVE-2018-5177 A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow… Ubuntu Linux 60.0+ Fix from $1,9502018-06-11 HIGH 8.1 CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requi… Debian Linux 52.8.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2018-5183 Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5145 Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that som… Debian Linux 52.7.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5150 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and w… Debian Linux 52.8.0 / 60.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5151 Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 60.0+ Fix from $2,3002018-06-11 HIGH 8.8 CVE-2018-5125 Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with… Ubuntu Linux 52.7.0 / 59.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2018-5126 Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 59.0+ Fix from $2,3002018-06-11 HIGH 8.8 CVE-2018-5127EPSS 8% A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vul… Enterprise Linux Desktop 52.7.0 / 59.0+ Fix from $1,9502018-06-11 HIGH 8.8 CVE-2017-7845 A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due … Firefox 52.5.2 / 57.0.2+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2018-5089 Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with… Ubuntu Linux 52.6.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5090 Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox after 57.0.4 Fix from $2,3002018-06-11 HIGH 7.5 CVE-2018-5093EPSS 20% A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulner… Firefox after 57.0.4 Fix from $1,9502018-06-11 HIGH 7.5 CVE-2018-5094EPSS 15% A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now un… Firefox after 57.0.4 Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2017-7824 A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect va… Enterprise Linux Aus 52.4.0 / 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7826 Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with… Debian Linux 52.5.0 / 57.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7827 Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox after 56.0.2 Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7810 Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with… Debian Linux 52.4.0 / 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7811 Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7785 A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially e… Debian Linux 52.3.0 / 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7786 A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. … Debian Linux 52.1.0 / 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7792 A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). … Debian Linux 52.3.0 / 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7778EPSS 5% A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninit… Firefox 1.3.10 / 52.2.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7779 Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and w… Debian Linux 52.3.0 / 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7780 Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… Firefox 55.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5464 During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory… Debian Linux 53.0+ Fix from $2,3002018-06-11 HIGH 7.5 CVE-2017-5467 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability a… Enterprise Linux Desktop 52.1 / 52.1.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2017-5469 Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox… Debian Linux 45.9.0 / 53.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5470 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with… Debian Linux 52.2.0 / 54.0+ Fix from $2,3002018-06-11