CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method

published April 26, 2019

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01615 · 75.8th percentile
Published
2019-04-26T16:13Z
EPSS history
Timeline
  • 26 APR 16:13Z
    Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method
    cvelistv5