A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 26, 2019 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Aug 28, 2019 | Apr 26, 2019 |
| Debian | — | Upgrade chromium-browser | Nov 3, 2018 | Oct 22, 2018 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Nov 26, 2018 | Nov 23, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 9, 2022 | Oct 16, 2018 |
| Mfsa2018 11 | — | Upgrade to Mozilla Firefox version 60.0 | Apr 12, 2019 | May 9, 2018 |
| Redhat_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Oct 25, 2018 | Oct 24, 2018 |
| Suse | — | Upgrade chromedriverUpgrade mozillafirefox-develUpgrade chromiumUpgrade mozillafirefoxUpgrade mozillafirefox-translations-common | Oct 23, 2018 | Oct 22, 2018 |
| Ubuntu | — | Upgrade chromium-browser | Nov 19, 2024 | Apr 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub