https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:32:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01411 bdu:2020-01411 https://cve.radiocsirt.org/vuln/bdu:2020-01411 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/cnvd-2019-32242 cnvd-2019-32242 https://cve.radiocsirt.org/vuln/cnvd-2019-32242 https://cve.radiocsirt.org/vuln/euvd-2026-53123 EUVD-2026-53123 https://cve.radiocsirt.org/vuln/euvd-2026-53123 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9812 <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9812 https://cve.radiocsirt.org/vuln/ghsa-jh9w-r6qf-jxc5 <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> https://cve.radiocsirt.org/vuln/ghsa-jh9w-r6qf-jxc5 https://cve.radiocsirt.org/vuln/gsd-2019-9812 gsd-2019-9812 https://cve.radiocsirt.org/vuln/gsd-2019-9812 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 https://cve.radiocsirt.org/vuln/rhsa-2019:2694 <p>Mozilla: Sandbox escape through Firefox Sync firefox: stored passwords in &#39;Saved Logins&#39; can be copied without master password entry Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images Mozilla: Cross-origin access to unload event attributes Mozilla: XSS by breaking out of title and textarea elements using innerHTML Mozilla: Use-after-free while manipulating video Mozilla: Use-after-free while extracting a key value in IndexedDB</p> <p>Mozilla: Sandbox escape through Firefox Sync firefox: stored passwords in &#39;Saved Logins&#39; can be copied without master password entry Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images Mozilla: Cross-origin access to unload event attributes Mozilla: XSS by breaking out of title and textarea elements using innerHTML Mozilla: Use-after-free while manipulating video Mozilla: Use-after-free while extracting a key value in IndexedDB</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2694 https://cve.radiocsirt.org/vuln/suse-su-2019:14173-1 <p>Security update for MozillaFirefox, firefox-glib2, firefox-gtk3</p> <p>Security update for MozillaFirefox, firefox-glib2, firefox-gtk3</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14173-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9812 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR &lt; 60.9, Firefox ESR &lt; 68.1, and Firefox &lt; 69.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9812