CVE-2016-9073

CVSS v3.0 7.5 (High)

CVSS v2.0 5 (Medium)

EPSS 0.19 % (56^th)

Affected Products 1

Advisories 5

WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox < 50.

Weaknesses

CWE-264: Permissions, Privileges, and Access Controls

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2018-06-11 21:29:01
(6 years ago)
Updated Date: 2018-07-30 13:57:05
(6 years ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 50.0 version	cpe:2.3:a:mozilla:firefox		< 50.0