The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade linux-firefox | Dec 10, 2025 | May 12, 2015 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | May 16, 2012 | May 1, 2012 |
| Mfsa2015 57 | — | Upgrade to Mozilla Firefox version 38.0Upgrade to Mozilla Firefox ESR version 31.7Upgrade to the latest version of Mozilla Firefox | May 14, 2015 | May 1, 2012 |
| Mfsa2019 01 | — | Upgrade to Mozilla Firefox version 65.0 | Jan 30, 2019 | May 1, 2012 |
| Mfsa2019 02 | — | Upgrade to Mozilla Firefox ESR version 60.5 | Jan 30, 2019 | May 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35.0 | Oct 22, 2015 | May 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.0.1Upgrade to Mozilla Thunderbird version 31.7Upgrade to the latest version of Mozilla Thunderbird | May 14, 2015 | May 1, 2012 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations-commonUpgrade chromiumUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade chromium-browser | Nov 19, 2024 | May 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub