Update the tenses used
This commit is contained in:
Tom Ritter
Родитель
dd67e03b87
Коммит
078b4ecb4d
|
|
@ -10,7 +10,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Sunwoo Kim and Youngmin Kim of SNU CompSec Lab
|
||||
description: |
|
||||
Under certain circumstances, asynchronous functions could cause a redirect to fail but expose the redirect target location.
|
||||
Under certain circumstances, asynchronous functions could have caused a redirect to fail but expose the redirect target location.
|
||||
bugs:
|
||||
- url: 1730120
|
||||
CVE-2021-43537:
|
||||
|
|
@ -26,7 +26,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Irvan Kurniawan (@sourc7)
|
||||
description: |
|
||||
By misusing a race in our notification code, an attacker could forcefully hide the notification for pages that have received full screen and pointer lock access, which could be used for spoof attacks.
|
||||
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks.
|
||||
bugs:
|
||||
- url: 1739091
|
||||
CVE-2021-43539:
|
||||
|
|
@ -34,15 +34,15 @@ advisories:
|
|||
impact: high
|
||||
reporter: Asumu Takikawa and Ioanna Dimitriou
|
||||
description: |
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could lead to a use-after-free causing a potentially exploitable crash.
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash.
|
||||
bugs:
|
||||
- url: 1739683
|
||||
CVE-2021-43540:
|
||||
title: WebExtensions could install persistent ServiceWorkers
|
||||
title: WebExtensions could have installed persistent ServiceWorkers
|
||||
impact: moderate
|
||||
reporter: Jake Heath
|
||||
description: |
|
||||
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not be uninstalled with the extension.
|
||||
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension.
|
||||
bugs:
|
||||
- url: 1636629
|
||||
CVE-2021-43541:
|
||||
|
|
@ -54,11 +54,11 @@ advisories:
|
|||
bugs:
|
||||
- url: 1696685
|
||||
CVE-2021-43542:
|
||||
title: XMLHttpRequest error codes could leak existence of external protocol handler
|
||||
title: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
|
||||
impact: moderate
|
||||
reporter: smolikraphael
|
||||
description: |
|
||||
Using XMLHttpRequest an attacker could identify installed applications by probing error messages for loading external protocols.
|
||||
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols.
|
||||
bugs:
|
||||
- url: 1723281
|
||||
CVE-2021-43543:
|
||||
|
|
@ -66,27 +66,27 @@ advisories:
|
|||
impact: moderate
|
||||
reporter: Armin Ebert
|
||||
description: |
|
||||
Documents loaded with the CSP sandbox directive could escape the sandbox's script restriction by embedding additional content.
|
||||
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content.
|
||||
bugs:
|
||||
- url: 1738418
|
||||
CVE-2021-43544:
|
||||
title: Receiving a malicious URL as text through a SEND intent could lead to XSS
|
||||
title: Receiving a malicious URL as text through a SEND intent could have led to XSS
|
||||
impact: moderate
|
||||
reporter: Irwan
|
||||
description: |
|
||||
When receiving a URL through a SEND intent, Firefox would search for the text but subsequent usages of the address bar might cause the URL to load unintentionally, which could lead to XSS and spoofing attacks.<br>*This bug only affected Firefox for Android.*
|
||||
When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks.<br>*This bug only affected Firefox for Android.*
|
||||
bugs:
|
||||
- url: 1739934
|
||||
CVE-2021-43545:
|
||||
title: Denial of Service when using Location API in a loop
|
||||
title: Denial of Service when using the Location API in a loop
|
||||
impact: low
|
||||
reporter: Paul Zühlcke
|
||||
description: |
|
||||
Using the Location API in a loop could cause severe applications hangs and crashes.
|
||||
Using the Location API in a loop could have caused severe application hangs and crashes.
|
||||
bugs:
|
||||
- url: 1720926
|
||||
CVE-2021-43546:
|
||||
title: Cursor spoofing could overlay user interface when native cursor is zoomeds
|
||||
title: Cursor spoofing could overlay user interface when native cursor is zoomed
|
||||
impact: low
|
||||
reporter: Daniel Veditz
|
||||
description: |
|
||||
|
|
@ -98,7 +98,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Mozilla developers and community
|
||||
description: |
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
bugs:
|
||||
- url: 1393362, 1735852, 1736046, 1736751, 1737009, 1739372, 1739421
|
||||
desc: Memory safety bugs fixed in Firefox 95
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Sunwoo Kim and Youngmin Kim of SNU CompSec Lab
|
||||
description: |
|
||||
Under certain circumstances, asynchronous functions could cause a redirect to fail but expose the redirect target location.
|
||||
Under certain circumstances, asynchronous functions could have caused a redirect to fail but expose the redirect target location.
|
||||
bugs:
|
||||
- url: 1730120
|
||||
CVE-2021-43537:
|
||||
|
|
@ -26,7 +26,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Irvan Kurniawan (@sourc7)
|
||||
description: |
|
||||
By misusing a race in our notification code, an attacker could forcefully hide the notification for pages that have received full screen and pointer lock access, which could be used for spoof attacks.
|
||||
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks.
|
||||
bugs:
|
||||
- url: 1739091
|
||||
CVE-2021-43539:
|
||||
|
|
@ -34,7 +34,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Asumu Takikawa and Ioanna Dimitriou
|
||||
description: |
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could lead to a use-after-free causing a potentially exploitable crash.
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash.
|
||||
bugs:
|
||||
- url: 1739683
|
||||
CVE-2021-43541:
|
||||
|
|
@ -46,11 +46,11 @@ advisories:
|
|||
bugs:
|
||||
- url: 1696685
|
||||
CVE-2021-43542:
|
||||
title: XMLHttpRequest error codes could leak existence of external protocol handler
|
||||
title: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
|
||||
impact: moderate
|
||||
reporter: smolikraphael
|
||||
description: |
|
||||
Using XMLHttpRequest, an attacker could identify installed applications by probing error messages for loading external protocols.
|
||||
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols.
|
||||
bugs:
|
||||
- url: 1723281
|
||||
CVE-2021-43543:
|
||||
|
|
@ -58,15 +58,15 @@ advisories:
|
|||
impact: moderate
|
||||
reporter: Armin Ebert
|
||||
description: |
|
||||
Documents loaded with the CSP sandbox directive could escape the sandbox's script restriction by embedding additional content.
|
||||
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content.
|
||||
bugs:
|
||||
- url: 1738418
|
||||
CVE-2021-43545:
|
||||
title: Denial of Service when using Location API in a loop
|
||||
title: Denial of Service when using the Location API in a loop
|
||||
impact: low
|
||||
reporter: Paul Zühlcke
|
||||
description: |
|
||||
Using the Location API in a loop could cause severe applications hangs and crashes.
|
||||
Using the Location API in a loop could have caused severe application hangs and crashes.
|
||||
bugs:
|
||||
- url: 1720926
|
||||
CVE-2021-43546:
|
||||
|
|
@ -82,7 +82,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Mozilla developers and community
|
||||
description: |
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, Masayuki Nakano reported memory safety bugs present in Firefox 94 and Firefox ESR 91.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94 and Firefox ESR 91.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
bugs:
|
||||
- url: 1393362, 1736046, 1736751, 1737009, 1739372, 1739421
|
||||
desc: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
|
||||
|
|
@ -12,7 +12,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Sunwoo Kim and Youngmin Kim of SNU CompSec Lab
|
||||
description: |
|
||||
Under certain circumstances, asynchronous functions could cause a redirect to fail but expose the redirect target location.
|
||||
Under certain circumstances, asynchronous functions could have caused a redirect to fail but expose the redirect target location.
|
||||
bugs:
|
||||
- url: 1730120
|
||||
CVE-2021-43537:
|
||||
|
|
@ -28,7 +28,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Irvan Kurniawan (@sourc7)
|
||||
description: |
|
||||
By misusing a race in our notification code, an attacker could forcefully hide the notification for pages that have received full screen and pointer lock access, which could be used for spoof attacks.
|
||||
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks.
|
||||
bugs:
|
||||
- url: 1739091
|
||||
CVE-2021-43539:
|
||||
|
|
@ -36,7 +36,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Asumu Takikawa and Ioanna Dimitriou
|
||||
description: |
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could lead to a use-after-free causing a potentially exploitable crash.
|
||||
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash.
|
||||
bugs:
|
||||
- url: 1739683
|
||||
CVE-2021-43541:
|
||||
|
|
@ -48,11 +48,11 @@ advisories:
|
|||
bugs:
|
||||
- url: 1696685
|
||||
CVE-2021-43542:
|
||||
title: XMLHttpRequest error codes could leak existence of external protocol handler
|
||||
title: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
|
||||
impact: moderate
|
||||
reporter: smolikraphael
|
||||
description: |
|
||||
Using XMLHttpRequest, an attacker could identify installed applications by probing error messages for loading external protocols.
|
||||
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols.
|
||||
bugs:
|
||||
- url: 1723281
|
||||
CVE-2021-43543:
|
||||
|
|
@ -60,15 +60,15 @@ advisories:
|
|||
impact: moderate
|
||||
reporter: Armin Ebert
|
||||
description: |
|
||||
Documents loaded with the CSP sandbox directive could escape the sandbox's script restriction by embedding additional content.
|
||||
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content.
|
||||
bugs:
|
||||
- url: 1738418
|
||||
CVE-2021-43545:
|
||||
title: Denial of Service when using Location API in a loop
|
||||
title: Denial of Service when using the Location API in a loop
|
||||
impact: low
|
||||
reporter: Paul Zühlcke
|
||||
description: |
|
||||
Using the Location API in a loop could cause severe applications hangs and crashes.
|
||||
Using the Location API in a loop could have caused severe application hangs and crashes.
|
||||
bugs:
|
||||
- url: 1720926
|
||||
CVE-2021-43546:
|
||||
|
|
@ -95,7 +95,7 @@ advisories:
|
|||
impact: high
|
||||
reporter: Mozilla developers and community
|
||||
description: |
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, Masayuki Nakano reported memory safety bugs present in Thunderbird 91.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Thunderbird 91.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
||||
bugs:
|
||||
- url: 1393362, 1736046, 1736751, 1737009, 1739372, 1739421
|
||||
desc: Memory safety bugs fixed in Thunderbird 91.4.0
|
||||
Загрузка…
Ссылка в новой задаче