Every CVE Search/ Get API key

CVE-2018-5148

A use-after-free vulnerability can occur in the compositor during certain graphics operations...

9.8 CriticalFix available

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.92%Up 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
CVE-2018-5148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
CVE-2018-5148
Updated
2026-11-02
EUVDEUVD-2018-16934 No score

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
EUVD-2018-16934
Updated
2026-11-03
GitHub AdvisoriesGHSA-x8jx-j549-3mc7 9.8

A use-after-free vulnerability can occur in the compositor during certain graphics operations...

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
GHSA-x8jx-j549-3mc7
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 9.8

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
CVE-2018-5148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-5148 9.8

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
DEBIAN-CVE-2018-5148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2018:1098 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2018:1098
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:1099 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2018:1099
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-5148 9.8

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.

Record
UBUNTU-CVE-2018-5148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2018-0202 No score

Updated firefox packages fix security vulnerability

Memory safety bugs fixed in Firefox ESR 52.7 (CVE-2018-5125).

Buffer overflow manipulating SVG animatedPathSegList (CVE-2018-5127).

Out-of-bounds write with malformed IPC messages (CVE-2018-5129).

Mismatched RTP payload type can trigger memory corruption (CVE-2018-5130).

Fetch API improperly returns cached copies of no-store/no-cache resources (CVE-2018-5131).

Integer overflow during Unicode conversion (CVE-2018-5144).

Memory safety bugs fixed in Firefox ESR 52.7 (CVE-2018-5145).

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash (CVE-2018-5148).

Record
MGASA-2018-0202
Updated
2026-11-02
OSVMGASA-2018-0338 No score

Updated iceaepe packages fix security vulnerability

Updated iceape packages include security fixes from upstream Seamonkey and Firefox:

Multiple flaws were found in the way Iceape 2.49.1 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose sensitive information (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129, CVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148, CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)

Record
MGASA-2018-0338
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2018:0850-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130):

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
  • CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
  • CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)
  • CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)
  • CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)
Record
SUSE-SU-2018:0850-1
Updated
2026-11-02
OSVSUSE-SU-2018:0907-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130):

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
  • CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
  • CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)
  • CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)
  • CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)
Record
SUSE-SU-2018:0907-1
Updated
2026-11-02
OSVUSN-3609-1 No score

firefox vulnerability

A use-after-free was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service or execute arbitrary code.

Record
USN-3609-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Debian:12
 before 52.7.3esr-1
52.7.3esr-1
firefox-esr
Debian:13
 before 52.7.3esr-1
52.7.3esr-1
firefox-esr
Debian:14
 before 52.7.3esr-1
52.7.3esr-1
firefox-esr
Debian:7
 before 52.7.3esr-1~deb7u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
52.7.3esr-1~deb7u1
firefox-esr
Debian:9
 before 52.7.3esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 44 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
52.7.3esr-1~deb9u1
firefox-esr
Debian:8
 before 52.7.3esr-1~deb8u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
52.7.3esr-1~deb8u1
firefox
Mageia:6
From an advisory covering 8 CVEs
 before 52.7.3-2.mga6
52.7.3-2.mga6
firefox-l10n
Mageia:6
From an advisory covering 8 CVEs
 before 52.7.3-1.mga6
52.7.3-1.mga6
nspr
Mageia:6
From an advisory covering 8 CVEs
 before 4.19-1.mga6
4.19-1.mga6
iceape
Mageia:6
From an advisory covering 29 CVEs
 before 2.49.3-1.mga6
2.49.3-1.mga6
Show 34 moreShow less
Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:6::client
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox
Red Hat:enterprise_linux:6::server
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:52.7.3-1.el6_9
0:52.7.3-1.el6_9
firefox
Red Hat:enterprise_linux:7::client
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
firefox
Red Hat:enterprise_linux:7::server
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:52.7.3-1.el7_5
0:52.7.3-1.el7_5
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
firefox
Ubuntu:14.04:LTS
 before 59.0.2+build1-0ubuntu0.14.04.1, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1
Show 45 moreShow less
28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.133.0+build2-0ubuntu0.14.04.134.0+build2-0ubuntu0.14.04.135.0+build3-0ubuntu0.14.04.235.0.1+build1-0ubuntu0.14.04.136.0+build2-0ubuntu0.14.04.436.0.1+build2-0ubuntu0.14.04.136.0.4+build1-0ubuntu0.14.04.137.0+build2-0ubuntu0.14.04.137.0.1+build1-0ubuntu0.14.04.137.0.2+build1-0ubuntu0.14.04.138.0+build3-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.139.0.3+build2-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.440.0.3+build1-0ubuntu0.14.04.141.0+build3-0ubuntu0.14.04.141.0.1+build2-0ubuntu0.14.04.141.0.2+build2-0ubuntu0.14.04.142.0+build2-0ubuntu0.14.04.143.0+build1-0ubuntu0.14.04.143.0.4+build3-0ubuntu0.14.04.144.0+build3-0ubuntu0.14.04.144.0.1+build2-0ubuntu0.14.04.144.0.2+build1-0ubuntu0.14.04.145.0+build2-0ubuntu0.14.04.145.0.1+build1-0ubuntu0.14.04.245.0.2+build1-0ubuntu0.14.04.146.0+build5-0ubuntu0.14.04.246.0.1+build1-0ubuntu0.14.04.347.0+build3-0ubuntu0.14.04.148.0+build2-0ubuntu0.14.04.149.0+build4-0ubuntu0.14.04.149.0.2+build2-0ubuntu0.14.04.150.0+build2-0ubuntu0.14.04.250.0.2+build1-0ubuntu0.14.04.150.1.0+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.2
59.0.2+build1-0ubuntu0.14.04.1
firefox
Ubuntu:16.04:LTS
 before 59.0.2+build1-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 35 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.1
59.0.2+build1-0ubuntu0.16.04.1
firefox
Ubuntu:18.04:LTS
 before 59.0.2+build1-0ubuntu1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu1
59.0.2+build1-0ubuntu1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 661 CVEs
 before 92.0-1.2
92.0-1.2
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-5148 is a critical vulnerability (CVSS 9.8) in Mozilla Firefox, published March 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in firefox-esr 52.7.3esr-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 92 versions and 1,700 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open