CVE-2018-18492

Mozilla: Use-after-free with select element

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.

CVSS 3.0 · 9.8 Critical EPSS 9.6% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12390

Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12389

Mozilla: Memory safety bugs fixed in Firefox ESR 60.3

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12392

Mozilla: Crash with nested event loops

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12386

Mozilla: type confusion in JavaScript

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

CVSS 3.0 · 8.1 High EPSS 13.5% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 7 more

CVE-2018-12387

Mozilla: stack out-of-bounds read in Array.prototype.push

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

CVSS 3.0 · 9.1 Critical EPSS 9.6% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 7 more

CVE-2018-12405

Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12376

Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

CVSS 3.0 · 9.8 Critical EPSS 3.1% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12377

Mozilla: Use-after-free in driver timers

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2018-12378

Mozilla: Use-after-free in IndexedDB

A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 8 more

CVE-2017-5445

Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Debian Mozilla Redhat

Products

Debian Linux Firefox Thunderbird and 6 more

CVE-2018-12379

Mozilla: Out-of-bounds write with malicious MAR file

When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Mozilla Redhat

Products

Debian Linux Firefox Thunderbird and 7 more

CVE-2023-38201

Keylime: challenge-response protocol bypass during agent registration

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Keylime Redhat

Products

Fedora Keylime Enterprise Linux and 6 more

CVE-2023-38200

Keylime: registrar is subject to a dos against ssl connections

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Keylime Redhat

Products

Fedora Keylime Enterprise Linux and 6 more

CVE-2019-8720

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Listed

Vendors

Redhat Webkitgtk Wpewebkit

Products

Codeready Linux Builder Codeready Linux Builder Eus Codeready Linux Builder For Arm64 Eus and 20 more

CVE-2022-0847

kernel: improper initialization of the "flags" member of the new pipe_buffer

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS 92.8% KEV · Listed

Vendors

Fedoraproject Linux Netapp and 4 more

Products

Fedora Linux Kernel H300e and 39 more

CVE-2021-4034

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

CVSS 3.1 · 7.8 High EPSS 94.9% KEV · Listed

Vendors

Canonical Oracle Polkit Project and 4 more

Products

Ubuntu Linux Http Server Zfs Storage Appliance Kit and 34 more

CVE-2018-1311

xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

CVSS 3.1 · 8.1 High EPSS 9.5% KEV · Not listed

Vendors

Apache Debian Fedoraproject and 2 more

Products

Xerces-c\+\+ Debian Linux Fedora and 8 more

CVE-2017-3167

httpd: ap_get_basic_auth_pw() authentication bypass

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.

CVSS 3.1 · 9.8 Critical EPSS 20.2% KEV · Not listed

Vendors

Apache Apple Debian and 3 more

Products

Http Server Mac Os X Debian Linux and 14 more

CVE-2016-9079

Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

CVSS 3.1 · 7.5 High EPSS 87.4% KEV · Listed

Vendors

Debian Microsoft Mozilla and 2 more

Products

Debian Linux Windows Firefox and 8 more