Mozilla Firefox Use-After-Free Vulnerability

Memory safety bugs present in Firefox 111

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially…

UXSS in Focus for iOS / Klar Webkit navigation

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code