{"id":"CVE-2018-12368","aliases":["EUVD-2018-4342","GHSA-ghmm-93ww-fvhh","MGASA-2018-0480","SUSE-SU-2018:2298-1","SUSE-SU-2018:2322-1","SUSE-SU-2018:2322-2","SUSE-SU-2018:2325-1"],"status":"published","title":"Windows 10 does not warn users before opening executable files with the SettingContent-ms...","description":"Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the \"Mark of the Web.\" Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04831,"percentile":0.92051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-08-10T09:36:01Z","modified":"2026-06-17T01:37:38Z","affected":[{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.3.3-3.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.3.3-1.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-3.7.12"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-109.38.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-72.38.6"}]}],"bundled":10}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1468217","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Permissions Required","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201810-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-15/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-18/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-16/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://posts.specterops.io/the-tale-of-settingcontent-ms-files-f1ea253e4d39","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/104560","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041193","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-19/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-17/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12368"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-15"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-16"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-17"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-18"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-19"},{"url":"https://github.com/advisories/GHSA-ghmm-93ww-fvhh"},{"url":"https://advisories.mageia.org/MGASA-2018-0480.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23706","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/60.3.0/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/60.3.1/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/60.3.2/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/60.3.3/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-19/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-25/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-28/","tags":["advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4327","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3458","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-11/msg00009.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3532","tags":["web"]},{"url":"https://www.debian.org/security/2018/dsa-4337","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182298-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1092548","tags":["report"]},{"url":"https://bugzilla.suse.com/1096449","tags":["report"]},{"url":"https://bugzilla.suse.com/1098998","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6126","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182322-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182322-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182325-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-12368","description":"Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the \"Mark of the Web.\" Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.","status":"published","published":"2018-10-18T13:00:00Z","modified":"2024-08-05T08:30:59.772Z","updated_at":"2026-11-02T14:35:06.320867Z"}],"euvd":[{"id":"EUVD-2018-4342","description":"Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the \"Mark of the Web.\" Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.","status":"published","published":"2018-10-18T13:00:00Z","modified":"2024-08-05T08:30:59Z","updated_at":"2026-11-03T02:39:53.14558Z"}],"ghsa":[{"id":"GHSA-ghmm-93ww-fvhh","title":"Windows 10 does not warn users before opening executable files with the SettingContent-ms...","description":"Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the \"Mark of the Web.\" Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.","status":"published","published":"2022-05-13T01:49:34Z","modified":"2024-10-21T15:33:26Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:58:33.735007Z"}],"nvd":[{"id":"CVE-2018-12368","description":"Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the \"Mark of the Web.\" Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.","status":"published","published":"2018-10-18T13:29:03.307Z","modified":"2026-06-17T01:37:38.19Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:46.409324Z"}],"osv":[{"id":"MGASA-2018-0480","title":"Updated thunderbird packages fix security issues \u0026 bugs","description":"- Buffer overflow using computed size of canvas element. (CVE-2018-12359)\n\n- Use-after-free when using focus(). (CVE-2018-12360)\n\n- Integer overflow in SwizzleData. (CVE-2018-12361)\n\n- Integer overflow in SSSE3 scaler. (CVE-2018-12362)\n\n- Media recorder segmentation fault when track type is changed during\ncapture. (CVE-2018-5156)\n\n- Use-after-free when appending DOM nodes. (CVE-2018-12363)\n\n- CSRF attacks through 307 redirects and NPAPI plugins. (CVE-2018-12364)\n\n- Compromised IPC child process can list local filenames.\n(CVE-2018-12365)\n\n- Integer overflow in Skia library during edge builder allocation.\n(CVE-2018-12371)\n\n- Invalid data handling during QCMS transformations. (CVE-2018-12366)\n\n- Timing attack mitigation of PerformanceNavigationTiming.\n(CVE-2018-12367)\n\n- No warning when opening executable SettingContent-ms files.\n(CVE-2018-12368)\n\n- Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and\nThunderbird 60. (CVE-2018-5187)\n\n- Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox\nESR 52.9, and Thunderbird 60. (CVE-2018-5188)\n\n- Use-after-free in refresh driver timers. (CVE-2018-12377)\n\n- Use-after-free in IndexedDB. (CVE-2018-12378)\n\n- Out-of-bounds write with malicious MAR file. (CVE-2018-12379)\n\n- Proxy bypass using automount and autofs. (CVE-2017-16541)\n\n- Crash in TransportSecurityInfo due to cached data. (CVE-2018-12385)\n\n- Setting a master password post-Firefox 58 does not delete unencrypted\npreviously stored passwords. (CVE-2018-12383)\n\n- Memory safety bugs fixed in Firefox 62, Firefox ESR 60.2, and\nThunderbird 60.2.1. (CVE-2018-12376)\n\n- HTTP Live Stream audio data is accessible cross-origin.\n(CVE-2018-12391)\n\n- Crash with nested event loops. (CVE-2018-12392)\n\n- Integer overflow during Unicode conversion while loading JavaScript.\n(CVE-2018-12393)\n\n- Memory safety bugs fixed in Firefox ESR 60.3 and Thunderbird 60.3.\n(CVE-2018-12389)\n\n- Memory safety bugs fixed in Firefox 63, Firefox ESR 60.3, and\nThunderbird 60.3. (CVE-2018-12390)\n","status":"published","published":"2018-12-15T21:29:48Z","modified":"2026-04-16T06:24:01.404935409Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2018:2298-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to the 52.9 ESR release fixes the following issues:\n\nThese security issues were fixed:\n\n- Firefox ESR 52.9:\n- CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 (bsc#1098998). \n- CVE-2018-12368 No warning when opening executable SettingContent-ms files (bsc#1098998).\n- CVE-2018-12366 Invalid data handling during QCMS transformations (bsc#1098998).\n- CVE-2018-12365 Compromised IPC child process can list local filenames (bsc#1098998).\n- CVE-2018-12364 CSRF attacks through 307 redirects and NPAPI plugins (bsc#1098998).\n- CVE-2018-12363 Use-after-free when appending DOM nodes (bsc#1098998).\n- CVE-2018-12362 Integer overflow in SSSE3 scaler (bsc#1098998).\n- CVE-2018-12360 Use-after-free when using focus() (bsc#1098998).\n- CVE-2018-5156 Media recorder segmentation fault when track type is changed during capture (bsc#1098998).\n- CVE-2018-12359 Buffer overflow using computed size of canvas element (bsc#1098998).\n\n- Firefox ESR 52.8:\n- CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).\n- CVE-2018-5183: Backport critical security fixes in Skia (bsc#1092548).\n- CVE-2018-5154: Use-after-free with SVG animations and clip paths (bsc#1092548).\n- CVE-2018-5155: Use-after-free with SVG animations and text paths (bsc#1092548).\n- CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files (bsc#1092548).\n- CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer (bsc#1092548).\n- CVE-2018-5159: Integer overflow and out-of-bounds write in Skia (bsc#1092548).\n- CVE-2018-5168: Lightweight themes can be installed without user interaction (bsc#1092548).\n- CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (bsc#1092548).\n- CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (bsc#1092548).\n\nThese non-security issues were fixed:\n\n- Various stability and regression fixes\n- Performance improvements to the Safe Browsing service to avoid slowdowns\n  while updating site classification data\n","status":"published","published":"2018-08-10T09:36:01Z","modified":"2026-02-04T03:28:27.464993Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2322-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version ESR 52.9 fixes the following issues:\n\n- CVE-2018-5188: Various memory safety bugs (bsc#1098998)\n- CVE-2018-12368: No warning when opening executable SettingContent-ms files\n- CVE-2018-12366: Invalid data handling during QCMS transformations\n- CVE-2018-12365: Compromised IPC child process can list local filenames\n- CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins\n- CVE-2018-12363: Use-after-free when appending DOM nodes\n- CVE-2018-12362: Integer overflow in SSSE3 scaler\n- CVE-2018-12360: Use-after-free when using focus()\n- CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture\n- CVE-2018-12359: Buffer overflow using computed size of canvas element\n","status":"published","published":"2018-08-14T12:44:40Z","modified":"2026-02-04T04:14:48.632099Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2322-2","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version ESR 52.9 fixes the following issues:\n\n- CVE-2018-5188: Various memory safety bugs (bsc#1098998)\n- CVE-2018-12368: No warning when opening executable SettingContent-ms files\n- CVE-2018-12366: Invalid data handling during QCMS transformations\n- CVE-2018-12365: Compromised IPC child process can list local filenames\n- CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins\n- CVE-2018-12363: Use-after-free when appending DOM nodes\n- CVE-2018-12362: Integer overflow in SSSE3 scaler\n- CVE-2018-12360: Use-after-free when using focus()\n- CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture\n- CVE-2018-12359: Buffer overflow using computed size of canvas element\n","status":"published","published":"2018-10-18T12:48:00Z","modified":"2026-02-04T04:05:35.391323Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2325-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version ESR 52.9 fixes the following issues:\n\n- CVE-2018-5188: Various memory safety bugs (bsc#1098998)\n- CVE-2018-12368: No warning when opening executable SettingContent-ms files\n- CVE-2018-12366: Invalid data handling during QCMS transformations\n- CVE-2018-12365: Compromised IPC child process can list local filenames\n- CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins\n- CVE-2018-12363: Use-after-free when appending DOM nodes\n- CVE-2018-12362: Integer overflow in SSSE3 scaler\n- CVE-2018-12360: Use-after-free when using focus()\n- CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture\n- CVE-2018-12359: Buffer overflow using computed size of canvas element\n","status":"published","published":"2018-08-14T13:58:21Z","modified":"2026-02-04T03:20:21.233974Z","updated_at":"2026-11-02T15:53:44.972817Z"}]}}