CVE 2018 document archive · 16
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,627 documents · Identifier year 2018 · 16 / 33
- CVE-2018-12393Mozilla: Integer overflow during Unicode conversion while loading JavaScript
- CVE-2018-12392Mozilla: Crash with nested event loops
- CVE-2018-12391Mozilla: HTTP Live Stream audio data is accessible cross-origin
- CVE-2018-12390Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- CVE-2018-12389Mozilla: Memory safety bugs fixed in Firefox ESR 60.3
- CVE-2018-12388firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code
- CVE-2018-12387Mozilla: stack out-of-bounds read in Array.prototype.push
- CVE-2018-12386Mozilla: type confusion in JavaScript
- CVE-2018-12385Mozilla: Crash in TransportSecurityInfo due to cached data
- CVE-2018-12384nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello
- CVE-2018-12383Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords
- CVE-2018-12382Mozilla: Addressbar spoofing with javascript URI on Firefox for Android
- CVE-2018-12381Mozilla: Dragging and dropping Outlook email message results in page navigation
- CVE-2018-12379Mozilla: Out-of-bounds write with malicious MAR file
- CVE-2018-12378Mozilla: Use-after-free in IndexedDB
- CVE-2018-12377Mozilla: Use-after-free in driver timers
- CVE-2018-12376Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- CVE-2018-12375Mozilla: Memory safety bugs fixed in Firefox 62
- CVE-2018-12374thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field
- CVE-2018-12373thunderbird: S/MIME plaintext can be leaked through HTML reply/forward
- CVE-2018-12372thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails
- CVE-2018-12371Mozilla: Integer overflow in Skia library during edge builder allocation
- CVE-2018-12370Mozilla: SameSite cookie protections bypassed when exiting Reader View
- CVE-2018-12369Mozilla: WebExtension security permission checks bypassed by embedded experiments
- CVE-2018-12368Mozilla: No warning when opening executable SettingContent-ms files
- CVE-2018-12367Mozilla: Timing attack mitigation of PerformanceNavigationTiming
- CVE-2018-12366Mozilla: Invalid data handling during QCMS transformations
- CVE-2018-12365Mozilla: Compromised IPC child process can list local filenames
- CVE-2018-12364Mozilla: CSRF attacks through 307 redirects and NPAPI plugins
- CVE-2018-12363Mozilla: Use-after-free when appending DOM nodes
- CVE-2018-12362Mozilla: Integer overflow in SSSE3 scaler
- CVE-2018-12361Mozilla: Integer overflow in SwizzleData
- CVE-2018-12360Mozilla: Use-after-free using focus()
- CVE-2018-12359Mozilla: Buffer overflow using computed size of canvas element
- CVE-2018-12358Mozilla: Same-origin bypass using service worker and redirection
- CVE-2018-12327ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution
- CVE-2018-12326redis: Code execution in redis-cli via crafted command line arguments
- CVE-2018-12265exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp
- CVE-2018-12264exiv2: integer overflow in getData function in preview.cpp
- CVE-2018-12233kernel: Memory corruption in JFS setattr
- CVE-2018-12232kernel: NULL pointer dereference if close and fchownat system calls share a socket file descriptor
- CVE-2018-12207hw: Machine Check Error on Page Size Change (IFU)
- CVE-2018-12193kernel: insufficient access control in Intel QuickAssist Technology
- CVE-2018-12183edk2: stack overflow in DxeCore leads to privilege escalation
- CVE-2018-12182edk2: insufficient memory write in SMM service leads to privilege escalation
- CVE-2018-12181edk2: Stack buffer overflow with corrupted BMP
- CVE-2018-12180edk2: Buffer Overflow in BlockIo service for RAM disk
- CVE-2018-12179edk2: improper configuration insystem firmware leads to privilege escalation
- CVE-2018-12178edk2: improper DNS packet size check
- CVE-2018-12130hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)