Lucene search

K
cvelistMozillaCVELIST:CVE-2018-18496
HistoryFeb 28, 2019 - 6:00 p.m.

CVE-2018-18496

2019-02-2818:00:00
mozilla
raw.githubusercontent.com
2

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating systems. Other operating systems are not affected.. This vulnerability affects Firefox < 64.

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%