Vulnerabilities

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.

The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file.

Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer.

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.