The vulnerability in the implementation of the Firefox browser’s Activity Stream page allows a perpetrator to access confidential data.

The vulnerability of the Firefox browser’s Activity Stream page relates to a bug in content writing without clearing. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

CVE-2018-5118

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the...