CVE-2018-5116

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with this permission. This vulnerability affects Firefox < 58.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-346

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-51175.3If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spCVE-2018-51185.3The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. AnCVE-2018-51195.3The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site. This CVE-2018-51215.3Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an InteCVE-2018-51229.8A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result iCVE-2018-51238.8A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.CVE-2018-51246.1Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.CVE-2018-51258.8Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume CVE-2018-51269.8Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effoCVE-2018-51278.8A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash.CVE-2018-51289.8A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in CVE-2018-51298.6A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potential