https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:46:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03415 bdu:2019-03415 https://cve.radiocsirt.org/vuln/bdu:2019-03415 https://cve.radiocsirt.org/vuln/certfr-2018-avi-467 certfr-2018-avi-467 https://cve.radiocsirt.org/vuln/certfr-2018-avi-467 https://cve.radiocsirt.org/vuln/cnvd-2018-21817 cnvd-2018-21817 https://cve.radiocsirt.org/vuln/cnvd-2018-21817 https://cve.radiocsirt.org/vuln/euvd-2026-65755 EUVD-2026-65755 https://cve.radiocsirt.org/vuln/euvd-2026-65755 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12387 <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12387 https://cve.radiocsirt.org/vuln/ghsa-vfrp-p8qm-9m8x <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> https://cve.radiocsirt.org/vuln/ghsa-vfrp-p8qm-9m8x https://cve.radiocsirt.org/vuln/gsd-2018-12387 gsd-2018-12387 https://cve.radiocsirt.org/vuln/gsd-2018-12387 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 <p>MozillaFirefox-92.0-1.2 on GA media</p> <p>MozillaFirefox-92.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2881 <p>Mozilla: type confusion in JavaScript Mozilla: stack out-of-bounds read in Array.prototype.push</p> <p>Mozilla: type confusion in JavaScript Mozilla: stack out-of-bounds read in Array.prototype.push</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2881 https://cve.radiocsirt.org/vuln/suse-su-2018:3476-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3476-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12387 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR &lt; 60.2.2 and Firefox &lt; 62.0.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12387