TI-2016-08023 CVE-2016-9903 · GHSA-9fhg-wr6f-g4x9
Cross-site scripting in Mozilla Firefox
Priority LOW 29
Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability.
4 records
Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability.
Use-after-free while manipulating the "navigator" object within WebVR.
A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation.
Memory safety bugs were reported in Firefox 50.0.2.