The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefoxUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Apr 26, 2016 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | Oct 30, 2017 | Apr 30, 2016 |
| Mfsa2016 48 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 46.0 | Apr 27, 2016 | Apr 26, 2016 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-other | May 4, 2016 | Apr 30, 2016 |
| Ubuntu | — | Upgrade firefox | Apr 30, 2016 | Apr 30, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub