9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.33 Low
EPSS
Percentile
97.0%
06/26/2018
Critical
Multiple serious vulnerabilities have been found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service and obtain sensitive information.
Mozilla Firefox earlier than 61
Mozilla Firefox ESR 52 earlier than 52.9
Mozilla Firefox ESR 60 earlier than 60.1
Update to the latest version
Download Mozilla Firefox ESR
Download Mozilla Firefox
Mozilla Foundation Security Advisory 2018-16
Mozilla Foundation Security Advisory 2018-15
Mozilla Foundation Security Advisory 2018-17
ACE
CVE-2018-123584.3Warning
CVE-2018-123596.8High
CVE-2018-123606.8High
CVE-2018-123616.8High
CVE-2018-123626.8High
CVE-2018-123636.8High
CVE-2018-123646.8High
CVE-2018-123654.3Warning
CVE-2018-123664.3Warning
CVE-2018-123674.3Warning
CVE-2018-123689.3Critical
CVE-2018-123697.5Critical
CVE-2018-123706.8High
CVE-2018-123716.8High
CVE-2018-51567.5Critical
CVE-2018-51867.5Critical
CVE-2018-51877.5Critical
CVE-2018-51887.5Critical
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12358
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12359
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12360
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12361
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12362
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12363
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12364
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12365
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12366
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12367
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12368
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12369
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12370
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12371
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5156
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5186
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5187
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5188
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Mozilla-Firefox-ESR/
threats.kaspersky.com/en/product/Mozilla-Firefox/
www.mozilla.org/en-US/firefox/new/
www.mozilla.org/en-US/firefox/organizations/all/
www.mozilla.org/en-US/security/advisories/mfsa2018-15/
www.mozilla.org/en-US/security/advisories/mfsa2018-16/
www.mozilla.org/en-US/security/advisories/mfsa2018-17/
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.33 Low
EPSS
Percentile
97.0%