Mozilla

Incorrect boundary conditions in the DOM: CSS Object Model component

Invalid pointer in the DOM: Editor component

Incorrect boundary conditions in the JavaScript: GC component

Use-after-free in the DOM: Core & HTML component

Incorrect boundary conditions in the DOM: Core & HTML component

Use-after-free in the Layout component

Use-after-free in the Audio/Video component

Sandbox escape due to use-after-free in the DOM: Service Workers component

Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: Core & HTML component