CVE-2018-5118

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites

published June 11, 2018

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01526 · 74.5th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites
    cvelistv5