Description
Mozilla: Use-after-free in HTTP2 Session object.
Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3.
Mozilla: iframe sandbox rules did not apply to XSLT stylesheets.
Mozilla: Use-after-free in file picker dialog.
Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning.
Mozilla: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports.
Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing.
Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain.