WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a malicious WebExtension to gain full browser permissions. This vulnerability affects Firefox ESR < 60.1 and Firefox < 61.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 18, 2018 |
| Freebsd | — | Upgrade firefox-esrUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade waterfoxUpgrade seamonkeyUpgrade firefox | Jun 27, 2018 | Jun 26, 2018 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 3, 2018 | Oct 2, 2018 |
| Mfsa2018 15 | — | Upgrade to Mozilla Firefox version 61.0Upgrade to the latest version of Mozilla Firefox | Jun 27, 2018 | Jun 26, 2018 |
| Mfsa2018 16 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.1 | Jun 27, 2018 | Jun 26, 2018 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-other | Jun 29, 2018 | Jun 26, 2018 |
| Ubuntu | — | Upgrade firefox | Jul 12, 2018 | Jun 26, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub