CVE 2018 document archive · 27
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,627 documents · Identifier year 2018 · 27 / 33
- CVE-2018-5207irssi: Out-of-bounds read when using an incomplete variable argument
- CVE-2018-5206irssi: NULL pointer dereference when channel topic is set without specifying sender
- CVE-2018-5205irssi: Out-of-bounds read when using incomplete escape codes
- CVE-2018-5188Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9
- CVE-2018-5187Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
- CVE-2018-5186Mozilla: Memory safety bugs fixed in Firefox 61
- CVE-2018-5185Mozilla: Leaking plaintext through HTML forms
- CVE-2018-5184Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack
- CVE-2018-5183Mozilla: Backport critical security fixes in Skia
- CVE-2018-5182Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar
- CVE-2018-5181Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink
- CVE-2018-5180Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
- CVE-2018-5178Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension
- CVE-2018-5177Mozilla: Buffer overflow in XSLT during number formatting
- CVE-2018-5176Mozilla: JSON Viewer script injection
- CVE-2018-5175Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies
- CVE-2018-5174Mozilla: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update
- CVE-2018-5173Mozilla: File name spoofing of Downloads panel with Unicode characters
- CVE-2018-5172Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer
- CVE-2018-5170Mozilla: Filename spoofing for external attachments
- CVE-2018-5169Mozilla: Dragging and dropping link text onto home button can set home page to include chrome pages
- CVE-2018-5168Mozilla: Lightweight themes can be installed without user interaction
- CVE-2018-5167Mozilla: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger
- CVE-2018-5166Mozilla: WebExtension host permission bypass through filterReponseData
- CVE-2018-5165Mozilla: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox
- CVE-2018-5164Mozilla: CSP not applied to all multipart content sent with multipart/x-mixed-replace
- CVE-2018-5163Mozilla: Replacing cached data in JavaScript Start-up Bytecode Cache
- CVE-2018-5162Mozilla: Encrypted mail leaks plaintext through src attribute
- CVE-2018-5161Mozilla: Hang via malformed headers
- CVE-2018-5160Mozilla: Uninitialized memory use by WebRTC encoder
- CVE-2018-5159Mozilla: Integer overflow and out-of-bounds write in Skia
- CVE-2018-5158Mozilla: Malicious PDF can inject JavaScript into PDF Viewer
- CVE-2018-5157Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files
- CVE-2018-5156Mozilla: Media recorder segmentation fault when track type is changed during capture
- CVE-2018-5155Mozilla: Use-after-free with SVG animations and text paths
- CVE-2018-5154Mozilla: Use-after-free with SVG animations and clip paths
- CVE-2018-5153Mozilla: Out-of-bounds read in mixed content websocket messages
- CVE-2018-5152Mozilla: WebExtensions information leak through webRequest API
- CVE-2018-5151Mozilla: Memory safety bugs fixed in Firefox 60
- CVE-2018-5150Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- CVE-2018-5148firefox: Use-after-free in compositor potentially allows code execution
- CVE-2018-5146Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)
- CVE-2018-5145Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
- CVE-2018-5144Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
- CVE-2018-5131Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)
- CVE-2018-5130Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)
- CVE-2018-5129Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)
- CVE-2018-5127Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07)
- CVE-2018-5125Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07)
- CVE-2018-5124firefox: Unsanitized output in browser UI can lead to arbitrary code execution