CVE-2018-12386
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
References
https://access.redhat.com/errata/RHSA-2018:2881https://access.redhat.com/errata/RHSA-2018:2884https://bugzilla.mozilla.org/show_bug.cgi?id=1493900https://security.gentoo.org/glsa/201810-01https://usn.ubuntu.com/3778-1/https://www.debian.org/security/2018/dsa-4310https://www.mozilla.org/security/advisories/mfsa2018-24/http://www.securityfocus.com/bid/105460http://www.securitytracker.com/id/1041770