https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:45:05 +0000 https://vulnerability.circl.lu/vuln/cve-2022-1529 <p><strong>Affected:</strong> Mozilla Firefox ESR, Mozilla Firefox, Mozilla Firefox for Android, Mozilla Thunderbird</p> <p>An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR &lt; 91.9.1, Firefox &lt; 100.0.2, Firefox for Android &lt; 100.3.0, and Thunderbird &lt; 91.9.1.</p> <p><strong>Affected:</strong> Mozilla Firefox ESR, Mozilla Firefox, Mozilla Firefox for Android, Mozilla Thunderbird</p> <p>An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR &lt; 91.9.1, Firefox &lt; 100.0.2, Firefox for Android &lt; 100.3.0, and Thunderbird &lt; 91.9.1.</p> https://vulnerability.circl.lu/vuln/cve-2022-1529 https://vulnerability.circl.lu/vuln/usn-5434-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox</p> <p>It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute JavaScript in a privileged context.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox</p> <p>It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute JavaScript in a privileged context.</p> https://vulnerability.circl.lu/vuln/usn-5434-1