Vulnerabilities

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL.

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash.

A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support.

A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash.

A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are us…

A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content.

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation.

A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash.

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM.

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers.

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.