Case Study of Browser DOM Vulnerabilities
Inspired by js-vuln-db
Chrome
| CVE Number / ID |
Module |
Label |
Credit |
| CVE-2018-6073 |
WebGL |
Heap Overflow |
[email protected] |
| CVE-2018-16082 |
sw::Surface |
Stack Overflow |
[email protected] |
| CR-666246 |
HTMLSelectElement |
UAF |
ifratric |
Firefox
| CVE Number |
Module |
Label |
Credit |
| CVE-2016-9079 |
nsSMILTimeContainer |
UAF |
Daniel Veditz |
| CVE-2017-5447 |
gfxTextRun |
OOB Read |
ifratric |
| CVE-2017-5465 |
ConvolvePixel |
Memory Disclosure |
ifratric |
Edge
| CVE Number |
Module |
Label |
Credit |
| CVE-2016-0003 |
CDOMTextNode |
Type Confusion |
unknown |
| CVE-2017-0037 |
CssParser |
Type Confusion |
ifratric |
| CVE-2017-8496 |
CssParser |
Type Confusion |
ifratric |
| CVE-2018-1021 |
CFormElement |
OOB Read |
akayn |
Webkit
| CVE Number |
Module |
Label |
Credit |
| CVE-2018-4197 |
RenderTreeBuilder |
UAF |
ifratric |
| CVE-2018-4306 |
Node |
UAF |
ifratric |
| CVE-2018-4312 |
AXObjectCache |
UAF |
ifratric |
| CVE-2018-4315 |
SVGTRefElement |
UAF, SVG |
ifratric |
| CVE-2018-4317 |
RenderLayer |
UAF |
ifratric |
| CVE-2018-4318 |
SVGTextLayoutAttributes |
UAF, SVG |
ifratric |
| CVE-2018-4323 |
RenderMultiColumnSet |
UAF |
ifratric |
| CVE-2018-4328 |
InlineTextBox |
OOB Read |
ifratric |
IE
| CVE Number |
Module |
Label |
Credit |
| CVE-2012-4792 |
CButton |
UAF |
unknown |
| CVE-2015-6152 |
CObjectElement |
UAF |
unknown |
| CVE-2018-8460 |
CStyleAttrArray |
Double Free |
Simon Zuckerbraun |
dom-vuln-db copied to clipboard
LyleMi
LyleMi