Lucene search

K
cvelistMozillaCVELIST:CVE-2018-12386
HistoryOct 18, 2018 - 1:00 p.m.

CVE-2018-12386

2018-10-1813:00:00
mozilla
raw.githubusercontent.com

7.8 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

92.9%

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.