Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox < 55.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Freebsd | — | Upgrade firefox-esrUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade thunderbird | Aug 8, 2017 | Aug 8, 2017 |
| Mfsa2017 18 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 55.0 | Aug 9, 2017 | Aug 8, 2017 |
| Oracle Solaris | — | Upgrade web/browser/firefox/plugin/firefox-java to version 52.4.0-0.175.3.25.0.3.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.4.0-0.175.3.25.0.3.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.4.0-0.175.3.25.0.3.0 on Solaris 11.3 | Aug 24, 2018 | Jun 11, 2018 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox | May 20, 2018 | Aug 8, 2017 |
| Ubuntu | — | Upgrade firefox | Aug 16, 2017 | Aug 8, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub