Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Debian Linux
CRITICAL 9.1
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an at…
Debian Linux
HIGH 8.6
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Ge…
Debian Linux
HIGH 7.5
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This…
Debian Linux
HIGH 7.5
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Th…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation cont…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially expl…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a pote…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. T…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leadin…
Debian Linux
HIGH 8.8
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash.…
Debian Linux
CRITICAL 9.8
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitabl…
Debian Linux
CRITICAL 9.8
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. T…
Debian Linux
CRITICAL 9.8
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This…
Debian Linux
CRITICAL 9.8
Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is mana…
Debian Linux
MEDIUM 6.5
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted us…
Debian Linux
MEDIUM 5.3
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firef…
Debian Linux
MEDIUM 5.3
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potenti…
Debian Linux
CRITICAL 9.8
A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, Firefox ESR <…
Debian Linux
CRITICAL 9.8
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, all…
Debian Linux
CRITICAL 9.8
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from …
Debian Linux
CRITICAL 9.8
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort …
Debian Linux
HIGH 7.3
WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data discl…
Debian Linux
MEDIUM 5.3
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing…
Debian Linux
CRITICAL 9.8
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Fi…
Debian Linux
CRITICAL 9.8
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects F…
Debian Linux
CRITICAL 9.8
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
Debian Linux
HIGH 7.5
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allo…
Debian Linux
HIGH 7.5
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash…
Debian Linux
CRITICAL 9.8
Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort …