All CVEs — page 412 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is a use-after-free vulnerability in the JavaScript Engine's JIT component, which could lead to arbitrary code execution if exploited.
The flaw allows privilege escalation in the Places component, enabling unauthorized users to gain higher privileges within the application.
This vulnerability allows for privilege escalation through the Address Bar component, enabling attackers to gain higher privileges within the affected applications.
This flaw allows an attacker to escape the sandbox due to incorrect boundary conditions in the XPCOM component, which could lead to arbitrary code execution.
This flaw allows an attacker to escape the sandbox by exploiting a use-after-free vulnerability in the Gtk component, leading to potential code execution.
This flaw involves a site isolation issue in the DOM: Networking component, which could allow attackers to bypass security restrictions and access sensitive information.
This flaw involves a use-after-free vulnerability in the CSS Parsing and Computation component, which could lead to high impact consequences if exploited.
This flaw involves incorrect boundary conditions in the JavaScript Engine's JIT component, potentially allowing attackers to execute arbitrary code.
The flaw involves an invalid pointer in the JavaScript Engine's JIT component, which could lead to arbitrary code execution if exploited.
This flaw allows attackers to escape the sandbox by exploiting a use-after-free vulnerability in the DOM: Core & HTML component, leading to potential code execution.
A security flaw in the DevTools component could allow attackers to execute arbitrary code, leading to complete system compromise.
A flaw exists in the DevTools component where the same-origin policy can be bypassed, allowing attackers to access sensitive information from other origins.
This flaw allows attackers to bypass mitigation controls in the Service Workers component, leading to potential high impact on the system, including data loss, service disruption, and unauthorized access.
This vulnerability allows for privilege escalation in the DOM: Service Workers component, enabling attackers to gain higher privileges within the application.
This vulnerability is a race condition combined with a use-after-free error in the audio/video component of Firefox and Thunderbird, which can lead to arbitrary code execution when processing media content. The flaw occurs when the system attempts to access memory that has already been freed, potentially allowing attackers to execute malicious code with the privileges of the browser process.
This flaw allows attackers to escape the sandbox by exploiting a use-after-free vulnerability in the Preferences: Backend component, leading to potential code execution.
This flaw allows a bypass of the same-origin policy in WebExtensions, enabling potential cross-site scripting attacks.