Vulnerabilities

On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected onl…

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions.

If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected.

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded.

If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system.

An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns.

In certain circumstances a networking event listener can be prematurely released.

The file picker dialog can choose and display the wrong local default directory when instantiated.

A segmentation fault can occur during some bidirectional layout operations.

A buffer overflow read during SVG filter color value operations, resulting in data exposure.

A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content.

A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks.

When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object.

Memory safety bugs were reported in Firefox 51.