TI-2020-09906 CVE-2020-12388 · GHSA-fx7p-g7cp-xx65
Improper input validation in Mozilla Firefox ESR
Priority MEDIUM 49
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.
Vulnerabilities
7 records
TI-2020-09907 CVE-2020-12389 · GHSA-hgp4-9j3m-3phf
Improper input validation in Mozilla Firefox ESR
Priority MEDIUM 46
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.
TI-2020-09908 CVE-2020-12390 · GHSA-2hhq-96pp-rf56
Deserialization of untrusted data in Mozilla Firefox
Priority MEDIUM 45
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks.
TI-2020-09909 CVE-2020-12391 · GHSA-cxc7-m7pw-q6p7
Incorrect authorization in Mozilla Firefox
Priority LOW 36
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context.
TI-2020-09911 CVE-2020-12393 · GHSA-x932-mvm6-79m8
OS command injection in Mozilla Firefox ESR
Priority LOW 36
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website.
TI-2020-09912 CVE-2020-12394 · GHSA-vp98-fg4h-f354
A logic flaw in our location bar implementation could have allowed a local attacker to…
Priority LOW 16
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element.
TI-2020-09914 CVE-2020-12396 · GHSA-764w-vr4w-hf3x
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 45
Mozilla developers and community members reported memory safety bugs present in Firefox 75.