Security Severity Ratings: Difference between revisions

| <b>csec- </b>

! csec-

|csec-bounds || client security issues due to incorrect boundary conditions (read or write)

|csec-disclosure || Disclosure of sensitive user data, personal information, etc in a client product.

|csec-dos || Used to tag client Denial of Service bugs. For web server denial of service bugs please use wsec-dos as these tend to be more severe. Search 28

|csec-intoverflow || client security issues due to integer overflow

|csec-oom || A client crash or hang that occurs in Out Of Memory conditions Search 2

|csec-other || client security issues that don't fit into other categories

|csec-priv-escalation || client privilege escalation security issues

|csec-sop || violations of the client Same Origin Policy (Universal-XSS bugs, for example).

|csec-uaf || client security issues due to a use-after-free Search 1

|csec-ui-redress || client security issues due to UI Redress attacks, either site-on-site ("clickjacking" and friends) or manipulation of the browser UI to fool users into taking the wrong action.

|csec-uninitialized || client security issues due to use of uninitialized memory

|csec-wildptr || client security issues due to pointer misuse not otherwise covered (see csec-uaf, csec-uninitialized, csec-intoverflow, csec-bounds)

|wsec-dos || Used to denote web server Denial of Service bugs. For similar bugs in client software please use csec-dos instead.