CVE-2018-18501

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Feb 5, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-185029.8Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corCVE-2018-185038.8When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatcCVE-2018-185049.8A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. ThCVE-2018-1850510.0An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpCVE-2018-185065.9When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this CVE-2018-185086.5In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulCVE-2018-185095.3A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even iCVE-2018-18519.8IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by impCVE-2018-185106.5The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the broCVE-2018-185114.3Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *NoteCVE-2018-185129.8A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediatelyCVE-2018-185137.5A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of