CVE-2018-12369

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a malicious WebExtension to gain full browser permissions. This vulnerability affects Firefox ESR < 60.1 and Firefox < 61.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Oct 18, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-12379.8Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent (L CVE-2018-123708.8In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when Reader View is exited CVE-2018-123718.8An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. T CVE-2018-123726.5Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulner CVE-2018-123736.5dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerabili CVE-2018-123744.3Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vul CVE-2018-123758.8Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort tha CVE-2018-123769.8Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that w CVE-2018-123779.8A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is de CVE-2018-123789.8A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload CVE-2018-123797.8When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading CVE-2018-12387.5Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is u