Arthur Gerkis

The issue allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence. This is due to improper object access in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, an attacker could take complete control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to a use-after-free error when working with the CDivElement object, allowing remote attackers to execute arbitrary code or cause a denial of service by accessing a specially crafted website. This could corrupt memory, enabling an attacker to execute code in the context of the current user.

The issue is related to a use-after-free error when handling the CDomRange object, allowing an attacker to execute arbitrary code or cause a denial of service by visiting a specially crafted website. This could corrupt memory, enabling the attacker to execute code in the context of the current user.

The issue is related to a use-after-free condition in the CWindow destructor of Microsoft Internet Explorer, which can lead to remote code execution.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This occurs because Internet Explorer improperly accesses an object in memory, potentially corrupting it in a way that enables an attacker to execute arbitrary code in the context of the current user.

A remote code execution issue exists due to improper memory access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the current user. This occurs when the browser improperly accesses an object in memory, which may result in memory corruption.

The issue is related to a use-after-free vulnerability that allows remote attackers to execute arbitrary code via a crafted web site, triggering access to a deleted object. This vulnerability may corrupt memory, enabling an attacker to execute arbitrary code in the context of the current user.

The issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This occurs due to the way Internet Explorer accesses an object in memory that has been deleted, potentially corrupting memory and enabling an attacker to execute arbitrary code in the context of the current user.

The issue is related to an off-by-one error in the invoke function, which can be triggered by a crafted webpage. This can lead to a heap-based buffer overflow, allowing remote attackers to obtain sensitive information, cause a denial of service, or possibly execute arbitrary code.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via vectors involving the movement of a `requiredFeatures` attribute from one SVG document to another.

The issue is caused by an integer overflow in the `nsSVGFEMorphologyElement::Filter` function, allowing remote attackers to execute arbitrary code via a crafted SVG filter. This triggers an incorrect sum calculation, leading to a heap-based buffer overflow.

A use-after-free issue exists in the Cascading Style Sheets (CSS) DOM implementation, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted document.

A use-after-free issue in the `nsGlobalWindow::PageHidden` function might allow remote attackers to execute arbitrary code via vectors related to focused content.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue is related to a use-after-free error in the `nsINode::ReplaceOrInsertBefore` function. This might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.

A race condition exists, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors related to worker processes.

The issue is related to the improper handling of SVG text elements, which can be exploited by remote attackers to cause a denial of service through an out-of-bounds read via unspecified vectors.

The issue is related to a use-after-free vulnerability, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved through vectors related to the handling of SVG values.