TI-2021-06299 CVE-2021-23978 · GHSA-3rjx-v36w-2rw5
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
Vulnerabilities
5 records
TI-2021-06284 CVE-2021-23961 · GHSA-m4x9-6p9j-3hx6
Further techniques that built on the slipstream research combined with a malicious…
Priority LOW 35
Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine.
TI-2021-06289 CVE-2021-23968 · GHSA-94jc-v9rf-w32j
Information disclosure through error messages in Mozilla Firefox
Priority LOW 23
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI.
TI-2021-06290 CVE-2021-23969 · GHSA-hrpc-c9c2-pj6w
As specified in the W3C Content Security Policy draft, when creating a violation report…
Priority LOW 22
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects.
TI-2021-06294 CVE-2021-23973 · GHSA-jw3c-jgq3-cf92
Information disclosure through error messages in Mozilla Firefox
Priority LOW 32
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.