Vulnerabilities > Mozilla

DATE CVE VULNERABILITY TITLE RISK
2019-04-26 CVE-2018-18512 Use After Free vulnerability in Mozilla Thunderbird
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird.
network
low complexity
mozilla CWE-416
critical
9.8
2019-04-26 CVE-2018-18511 Information Exposure vulnerability in Mozilla Firefox 65.0
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method.
network
low complexity
mozilla CWE-200
4.3
2019-04-26 CVE-2018-18510 Unspecified vulnerability in Mozilla Firefox
The about:crashcontent and about:crashparent pages can be triggered by web content.
network
low complexity
mozilla
6.5
2019-04-26 CVE-2018-18509 Improper Verification of Cryptographic Signature vulnerability in Mozilla Thunderbird
A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature.
network
low complexity
mozilla CWE-347
5.3
2019-04-26 CVE-2018-5179 Missing Release of Resource after Effective Lifetime vulnerability in Mozilla Firefox
A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users.
network
low complexity
mozilla CWE-772
7.5
2019-04-15 CVE-2017-7777 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
network
low complexity
mozilla sil CWE-119
8.8
2019-04-15 CVE-2017-7776 Out-of-bounds Read vulnerability in multiple products
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
network
low complexity
mozilla sil CWE-125
8.1
2019-04-15 CVE-2017-7774 Out-of-bounds Read vulnerability in multiple products
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
network
low complexity
mozilla sil CWE-125
critical
9.1
2019-04-15 CVE-2017-7773 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
network
low complexity
mozilla sil CWE-119
8.8
2019-04-15 CVE-2017-7771 Out-of-bounds Read vulnerability in multiple products
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
network
low complexity
mozilla sil CWE-125
8.1