CVE-2017-7816 PUBLISHED

WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavior. This vulnerability affects Firefox < 56.

EPSS 0.27% · 50.4th percentile

Risk Scores

EPSS Score
0.27%
50.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfirefox0
Ubuntu:16.04:LTSfirefox41.0.2+build2-0ubuntu1, 42.0+build2-0ubuntu1, 44.0+build3-0ubuntu2
Ubuntu:14.04:LTSfirefox41.0.2+build2-0ubuntu0.14.04.1, 42.0+build2-0ubuntu0.14.04.1, 43.0+build1-0ubuntu0.14.04.1

Timeline

References

Open in Interactive Console →