CVE-2017-7787

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-77889.8When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's CVE-2017-77895.3If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Tran CVE-2017-77907.5On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can CVE-2017-77915.3On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following pa CVE-2017-77929.8A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifie CVE-2017-77939.8A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in CVE-2017-77947.8On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explici CVE-2017-77964.7On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that n CVE-2017-77977.5Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored h CVE-2017-77988.8The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the wors CVE-2017-77996.1JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usage CVE-2017-78009.8A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is