Vulnerabilities > Mozilla > Firefox ESR > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-06-11 | CVE-2017-7785 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. | 7.5 |
2018-06-11 | CVE-2017-7784 | Use After Free vulnerability in multiple products A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. | 7.5 |
2018-06-11 | CVE-2017-7778 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. | 7.5 |
2018-06-11 | CVE-2017-7757 | Use After Free vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. | 7.5 |
2018-06-11 | CVE-2017-7756 | Use After Free vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). | 7.5 |
2018-06-11 | CVE-2017-7751 | Use After Free vulnerability in multiple products A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. | 7.5 |
2018-06-11 | CVE-2017-7750 | Use After Free vulnerability in multiple products A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. | 7.5 |
2018-06-11 | CVE-2017-7749 | Use After Free vulnerability in multiple products A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. | 7.5 |
2018-06-11 | CVE-2017-5472 | Use After Free vulnerability in multiple products A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. | 7.5 |
2018-06-11 | CVE-2017-5470 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. | 7.5 |