Vulnerabilities

Incorrect garbage collection interaction could have led to a use-after-free.

A select option could partially obscure security prompts.

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor.

The date picker could partially obscure security prompts.

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free.

Unexpected marking work at the start of sweeping could have led to a use-after-free.

ANGLE failed to initialize parameters which lead to reading from uninitialized memory.

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site.

Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.

Editor code failed to check an attribute value.

Incomplete WebAssembly exception handing could have led to a use-after-free.

A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution.

Insufficient checks when processing graphics shared memory could have led to memory corruption.

Select options could obscure the fullscreen notification dialog.