| 1421324
|
|
Overwrite of existing cookie with HttpOnly flagged cookie results in HttpOnly being ignored by Firefox
|
Core
|
Networking: Cookies
|
amchung
|
RESO
|
FIXE
|
2018-03-15
|
| 1416878
|
|
heap-use-after-free in nsWebShellWindow::WindowResized
|
Core
|
DOM: Core & HTML
|
freesamael
|
RESO
|
FIXE
|
2019-03-13
|
| 1418074
|
|
Web Workers - Use After Free in nsWrapperCache::GetWrapperPreserveColor()
|
Core
|
DOM: Core & HTML
|
amarchesini
|
VERI
|
FIXE
|
2019-03-13
|
| 1426363
|
|
Host permissions with scheme wildcard (*://...) are not shown in permissions doorhangers
|
WebExtensions
|
Frontend
|
andrew.swan
|
VERI
|
FIXE
|
2018-06-19
|
| 1419363
|
|
heap-use-after-free in mozilla::dom::HTMLMediaElement::NotifyMediaStreamTracksAvailable
|
Core
|
Audio/Video: MediaSt
|
apehrson
|
VERI
|
FIXE
|
2018-08-28
|
| 1417405
|
|
heap-use-after-free in nsIDocument::IsPotentiallyScrollable
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
VERI
|
FIXE
|
2018-08-28
|
| 1422215
|
|
WebRTC - Use After Free in in JsepSessionImpl::CheckNegotiationNeeded()
|
Core
|
WebRTC: Signaling
|
docfaraday
|
VERI
|
FIXE
|
2018-02-06
|
| 1423086
|
|
Use After Free in PeerConnectionImpl::DTMFSendTimerCallback_m()
|
Core
|
WebRTC: Signaling
|
docfaraday
|
VERI
|
FIXE
|
2018-08-28
|
| 1413815
|
|
ASAN Arbitrary-Address-Read Crash and Heap Overflow Crash
|
Core
|
DOM: Core & HTML
|
echen
|
VERI
|
FIXE
|
2019-03-13
|
| 1415541
|
|
heap-use-after-free in nsXMLPrettyPrinter::PrettyPrint
|
Core
|
DOM: Core & HTML
|
MatsPalmgren_bugz
|
VERI
|
FIXE
|
2019-03-13
|
| 1399400
|
|
heap-use-after-free in nsGenericHTMLElement::GetFormControlFrame
|
Core
|
DOM: Core & HTML
|
mrbkap
|
VERI
|
FIXE
|
2018-08-28
|
| 1414425
|
|
Resource Timing API leaks URL after subframe navigation again
|
Core
|
Networking: HTTP
|
valentin.gosu
|
VERI
|
FIXE
|
2018-08-28
|
| 1414490
|
|
heap-buffer-overflow in nsHtml5TreeBuilder::appendToCurrentNodeAndPushElementMayFoster
|
Core
|
DOM: HTML Parser
|
hsivonen
|
VERI
|
FIXE
|
2018-02-09
|
| 1425000
|
|
heap-use-after-free in gfxUserFontEntry::DoLoadNextSrc
|
Core
|
DOM: CSS Object Mode
|
cam
|
VERI
|
FIXE
|
2018-08-28
|
| 1408017
|
|
Crash with failed "@mozilla.org/startupcache/cache;1" instances
|
Core
|
XPCOM
|
continuation
|
VERI
|
FIXE
|
2018-08-28
|
| 1417661
|
|
heap-buffer-overflow in nsFirstLetterFrame::CreateContinuationForFloatingParent
|
Core
|
Layout: Floats
|
emilio
|
VERI
|
FIXE
|
2018-08-28
|
| 1418000
|
|
heap-buffer-overflow in nsHtml5TreeBuilder::popOnEof
|
Core
|
DOM: HTML Parser
|
hsivonen
|
VERI
|
FIXE
|
2018-02-15
|
| 1418447
|
|
Heap overflow write in SkEdgeBuilder::buildPoly
|
Core
|
Graphics
|
lsalzman
|
VERI
|
FIXE
|
2018-08-28
|
| 1426345
|
|
heap-use-after-free in nsDisplayMathMLCharForeground::GetBounds
|
Core
|
MathML
|
MatsPalmgren_bugz
|
VERI
|
FIXE
|
2018-03-10
|
| 1417010
|
|
heap-use-after-free in nsDisplayMathMLCharForeground::GetBounds
|
Core
|
MathML
|
matt.woodrow
|
VERI
|
FIXE
|
2018-02-22
|
| 1416450
|
|
DOM - Use After Free in HasFlag()
|
Core
|
DOM: Core & HTML
|
smaug
|
VERI
|
FIXE
|
2018-02-01
|
| 1422092
|
|
heap-use-after-free in mozilla::dom::DOMIntersectionObserver::Update
|
Core
|
DOM: Core & HTML
|
smaug
|
VERI
|
FIXE
|
2018-03-02
|
| 1423159
|
|
heap-use-after-free in mozilla::CreateMouseOrPointerWidgetEvent
|
Core
|
DOM: Events
|
smaug
|
VERI
|
FIXE
|
2018-08-28
|