WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefox-esrUpgrade waterfoxUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade libxulUpgrade firefoxUpgrade seamonkeyUpgrade thunderbird | Dec 10, 2025 | Jan 23, 2018 |
| Mfsa2018 02 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 58.0 | Jan 24, 2018 | Jan 23, 2018 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-common | May 19, 2018 | Jan 24, 2018 |
| Ubuntu | — | Upgrade firefox | Apr 26, 2018 | Jan 24, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub