CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 1CVE-2021-29980 – Mozilla: Uninitialized memory in a canvas object could have led to memory corruption
https://notcve.org/view.php?id=CVE-2021-29980
12 Aug 2021 — Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91. Una memoria no inicializada en un objeto canvas podría haber causado una función free() incorrecta, conllevando a una corrupción de la memoria y un bloqueo potencialmente explotable. Esta vulnerabilidad afecta a Thunderbird versiones anteriores a 78.13, Thunderbi... • https://bugzilla.mozilla.org/show_bug.cgi?id=1722204 • CWE-908: Use of Uninitialized Resource CWE-909: Missing Initialization of Resource •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 1CVE-2021-29985 – Mozilla: Use-after-free media channels
https://notcve.org/view.php?id=CVE-2021-29985
12 Aug 2021 — A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91. Una vulnerabilidad de uso de la memoria previamente liberada en los canales multimedia podría haber conllevado a una corrupción de la memoria y un bloqueo potencialmente explotable. Esta vulnerabilidad afecta a Thunderbird versiones anteriores a 78.13, Thunderbird versiones anteriores... • https://bugzilla.mozilla.org/show_bug.cgi?id=1722083 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-29989 – Mozilla: Memory safety bugs fixed in Thunderbird 78.13
https://notcve.org/view.php?id=CVE-2021-29989
12 Aug 2021 — Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.13, Firefox ESR < 78.13, and Firefox < 91. Los desarrolladores de Mozilla informaron de bugs de seguridad de memoria presentes en Firefox 90 y Firefox ESR 78.12. Algunos de estos bugs mostraron evidencias de corrupción... • https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662676%2C1666184%2C1719178%2C1719998%2C1720568 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-29971 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29971
05 Aug 2021 — If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 90. Si un usuario ha concedido un permiso a una página web y ha guardado esa concesión, cualquier página web que se ejecute en el mismo host -independientemente del esquema o del puerto- recibirá ese permiso. • https://bugzilla.mozilla.org/show_bug.cgi?id=1713638 • CWE-281: Improper Preservation of Permissions •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-29972 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29972
05 Aug 2021 — A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilities as well. This vulnerability affects Firefox < 90. Se ha encontrado una vulnerabilidad de uso de memoria previamente liberada por medio de pruebas, y se ha detectado una librería Cairo desactualizada. La actualización de la biblioteca resolvió el problema, y puede haber corregido también otras vulnerabilidade... • https://bugzilla.mozilla.org/show_bug.cgi?id=1696816 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-29973 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29973
05 Aug 2021 — Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 90. El autocompletado de contraseñas se activaba sin la interacción del usuario en sitios web no seguros en Firefox para Android. • https://bugzilla.mozilla.org/show_bug.cgi?id=1701932 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2021-29974 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29974
05 Aug 2021 — When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to override an error on a domain which had specified HTTP Strict Transport Security (which implies that the error should not be override-able.) This issue did not affect the network connections, and they were correctly upgraded to HTTPS automatically. This vulnerability affects Firefox < 90. Cuando se habilitaba la partición de la red, por ejemplo, como resultado de la conf... • https://bugzilla.mozilla.org/show_bug.cgi?id=1704843 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-29975 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29975
05 Aug 2021 — Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correctly shown in the address bar) resulting in possible user confusion. This vulnerability affects Firefox < 90. Mediante una serie de manipulaciones del DOM, un mensaje, sobre el que el atacante tenía control del texto pero no del HTML o del formato, podía superponerse sobre otro dominio (con el nuevo dominio mostrado... • https://bugzilla.mozilla.org/show_bug.cgi?id=1713259 •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-29977 – openSUSE Security Advisory - openSUSE-SU-2024:14572-1
https://notcve.org/view.php?id=CVE-2021-29977
05 Aug 2021 — Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 90. Los desarrolladores de Mozilla informaron de fallos de seguridad de memoria presentes en Firefox 89. Algunos de estos fallos mostraban evidencias de corrupción de memoria y suponemos que con suficiente esfuerzo algunos de ellos podrían haber s... • https://bugzilla.mozilla.org/buglist.cgi?bug_id=1665836%2C1686138%2C1704316%2C1706314%2C1709931%2C1712084%2C1712357%2C1714066 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 1CVE-2021-29970 – Mozilla: Use-after-free in accessibility features of a document
https://notcve.org/view.php?id=CVE-2021-29970
15 Jul 2021 — A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90. Una página web maliciosa podría desencadenar un uso de memoria previamente liberada, una corrupción de memoria y un bloqueo potencialmente explotable. *Este bug sólo podía ser desencadenado cuando la accesibilidad estaba activada. • https://bugzilla.mozilla.org/show_bug.cgi?id=1709976 • CWE-416: Use After Free CWE-787: Out-of-bounds Write •