The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will be opened. This is contrary to policy and is what would happen if the string were the equivalent "file:" URL. This vulnerability affects Firefox < 60.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Freebsd | — | Upgrade thunderbirdUpgrade waterfoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade linux-thunderbird | May 10, 2018 | May 9, 2018 |
| Mfsa2018 11 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 60.0 | May 10, 2018 | May 9, 2018 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-other | May 20, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade firefox | May 22, 2018 | May 9, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub