CVE-2019-11716

HIGH Year: 2019
CVSS v3 Score
8.3
High
CVSS v2 Score
7.5
High
Weakness Type
CWE-20
View all →

Vulnerability Description

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.

Related Vulnerabilities

CVE-2019-9503

HIGH
CVSS:8.3(High)

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a rem...

CWE-202019

CVE-2020-17439

HIGH
CVSS:8.3(High)

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DNS replies match outgoing DNS queries in n...

CWE-202020

CVE-2021-21357

HIGH
CVSS:8.3(High)

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predef...

CWE-202021

CVE-2021-42114

HIGH
CVSS:8.3(High)

Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, con...

CWE-202021

CVE-2022-1727

HIGH
CVSS:8.3(High)

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

CWE-202022

CVE-2010-1896

HIGH
CVSS:8.4(High)

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate use...

CWE-202010