URIs with invalid %-encoding mishandled by Windows, XPCNativeWrapper pollution using Script object, Possible file stealing through sftp protocol, XUL pages can hide the window titlebar, File input focus stealing vulnerability, Browser digest authentication request splitting, onUnload Tailgating, Crashes with evidence of memory corruption (rv:1.8.1.8).

More