Inferno

The issue is related to a use-after-free vulnerability in the `nsXULPopupManager::KeyDown` function. This vulnerability allows attackers to execute arbitrary code or cause a denial of service, such as heap memory corruption and application crash, by leveraging keyboard access to use the Alt key during the selection of top-level menu items.

The issue is related to an integer overflow in the `mozilla::layers::BufferTextureClient::AllocateForSurface` function. This allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.

The issue is related to multiple unspecified vulnerabilities in the code of the affected software. These vulnerabilities can be exploited by attackers to cause a denial of service or possibly have other impact via unknown vectors. The estimated number of potentially affected devices worldwide is not available.

The issue is related to a use-after-free vulnerability in the ServiceWorker implementation. This vulnerability can be exploited by a remote attacker to cause a denial of service or possibly have other unspecified impacts by leveraging object destruction in a callback. The vulnerability is associated with the use of memory after it has been freed.

The issue is related to a heap-based buffer overflow in the resize context buffers function in libvpx, which can be exploited by remote attackers via malformed WebM video data, potentially allowing them to execute arbitrary code.

The issue is related to multiple unspecified vulnerabilities in Google Chrome. These vulnerabilities can be exploited by attackers to cause a denial of service or possibly have other unspecified impacts via unknown vectors. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.

The issue is related to a use-after-free vulnerability in the IndexedDB implementation, specifically in the content/browser/indexed db/indexed db backing store.cc file. This vulnerability can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts by leveraging an abort action before a certain write operation. The exploitation involves influencing write operations, which can lead to system disruption.

The issue involves multiple unspecified vulnerabilities that can be exploited by a remote attacker to cause a denial of service or possibly have other impact. The exact vectors used for the exploitation are unknown.

The issue is related to the Off Main Thread Compositing (OMTC) implementation, which makes an incorrect memset call during interaction with the `mozilla::layers::BufferTextureClient::AllocateForSurface` function. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors that trigger rendering of 2D graphics content.

A heap-based buffer overflow issue allows remote attackers to cause a denial of service, resulting in an unpaged memory write and process crash, via a crafted MP4 file.

The issue is related to multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation. These vulnerabilities can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. The exploitation vectors trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, which is related to the NotifyStartedCaching and NotifyFinishedCaching functions.

A double free vulnerability exists in the nsXMLHttpRequest::GetResponse function when a nonstandard memory allocator is used, allowing remote attackers to execute arbitrary code or cause a denial of service via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.

A use-after-free issue exists in the FrameView::calculateScrollbarModesForLayout function, allowing remote attackers to cause a denial of service, potentially leading to an application crash, via crafted JavaScript code that calls the `removeChild` method during interaction with a FRAME element.

The issue is related to the rendering of SVG text elements in Google Chrome. It occurs when the `RenderSVGText.cpp` file in WebCore in WebKit does not properly perform a cast of an unspecified variable during an attempt to handle a block child. This can allow remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unknown impacts via a crafted text element in an SVG document.

The issue is related to multiple unspecified vulnerabilities that could allow attackers to cause a denial of service or possibly have other impact. The exact vectors used for the attack are unknown.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.