TI-2019-08792 CVE-2019-11735 · GHSA-qrhm-66h9-79gh
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 40
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68.
Vulnerabilities
8 records
TI-2019-08793 CVE-2019-11736 · GHSA-g4fc-6wpg-63m2
Race condition in Mozilla Firefox
Priority LOW 30
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is…
TI-2019-08795 CVE-2019-11738 · GHSA-v2rv-c5w8-f538
If a Content Security Policy (CSP) directive is defined that uses a hash-based source…
Priority LOW 31
If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed.
TI-2019-08804 CVE-2019-11747 · GHSA-9f7j-g98g-532j
The "Forget about this site" feature in the History pane is intended to remove all saved…
Priority LOW 31
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site.
TI-2019-08805 CVE-2019-11748 · GHSA-pf67-g7x9-r27m
WebRTC in Firefox will honor persisted permissions given to sites for access to…
Priority LOW 31
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context.
TI-2019-08806 CVE-2019-11749 · GHSA-4v6f-vqcf-8j87
A vulnerability exists in WebRTC where malicious web content can use probing techniques…
Priority LOW 22
A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or n…
TI-2019-08807 CVE-2019-11750 · GHSA-hxrv-jv26-w5f4
Type confusion in Mozilla Firefox
Priority LOW 31
A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash.
TI-2019-08808 CVE-2019-11751 · GHSA-mm6c-gvcp-4p56
Logging-related command line parameters are not properly sanitized when Firefox is…
Priority MEDIUM 40
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application.