Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05
ebian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1388020%2C1433609%2C1409440%2C1448705%2C1451376%2C1452202%2C1444668%2C1393367%2C1411415%2C1426129 - https://usn.ubuntu.com/3688-1/ - https://www.debian.org/security/2018/dsa-4209 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5151 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.992Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 60 Description: Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - h
http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1445234%2C1449530%2C1437455%2C1447989%2C1438827%2C1436983%2C1435036%2C1440465%2C1439723%2C1448771%2C1453653%2C1454359%2C1432323%2C1454126%2C1436759%2C1439655%2C1448612%2C1449358%2C1367727%2C1452417
CVE ID: CVE-2018-5152 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.963Z Vendors: Mozilla Products: Firefox Problem Types: WebExtensions information leak through webRequest API Description: WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logge
raffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1415644 - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1427289
CVE ID: CVE-2018-5153 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.992Z Vendors: Mozilla Products: Firefox Problem Types: Out-of-bounds read in mixed content websocket messages Description: If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bounds read with the read memory sent to the originating server in response. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securi
advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1436809
CVE ID: CVE-2018-5154 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.975Z Vendors: Mozilla Products: Thunderbird, Thunderbird ESR, Firefox, Firefox ESR Problem Types: Use-after-free with SVG animations and clip paths Description: A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://
r: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://bugzilla.mozilla.org/show_bug.cgi?id=1443092 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announc
45-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5155 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.016Z Vendors: Mozilla Products: Thunderbird, Thunderbird ESR, Firefox, Firefox ESR Problem Types: Use-after-free with SVG animations and text paths Description: A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access
erences: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RH
msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://bugzilla.mozilla.org/show_bug.cgi?id=1448774 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5156 State: PUBLISHED Published: 2018-10-18T13:00:00 Last Updated: 2024-08-05T05:26:46.986Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Media recorder segmentation fault when track type is changed during capture Description: A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/2
9, and Firefox < 61. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - https://www.mozilla.org/security/advisories/mfsa2018-15/ - https://access.redhat.com/errata/RHSA-2018:2112 - https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html - https://security.gentoo.org/glsa/201811-13 - https://bugzilla.mozilla.org/show_bug.cgi?id=1453127 - https://www.debian.org/security/2018/dsa-4235 - https://www.debian.org/security/2018/dsa-4295 - https://access.redhat.com/errata/RHSA-2018:2113 - https://www.mozilla.org/security/advisories/mfsa2018-16/ - http://www.securityfocus.com/bid/104560 - http://www.securitytracker.com/id/1041193 -
ecurity/advisories/mfsa2018-16/ - http://www.securityfocus.com/bid/104560 - http://www.securitytracker.com/id/1041193 - https://www.mozilla.org/security/advisories/mfsa2018-19/ - https://www.mozilla.org/security/advisories/mfsa2018-17/ - https://usn.ubuntu.com/3705-1/ - https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html
CVE ID: CVE-2018-5157 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.995Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Same-origin bypass of PDF Viewer to view protected PDF files Description: Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an authenticated user on a third-party website. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.
Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1414 - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1449898 - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5158 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.026Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Malicious PDF can inject JavaScript into PDF Viewer Description: The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - h
ontainer: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1414 - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1452075 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5159 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.960Z Vendors: Mozilla Products: Thunderbird, Thunderbird ESR, Firefox, Firefox ESR Problem Types: Integer overflow and out-of-bounds write in Skia Description: An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.red
irefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.exploit-db.com/exploits/44759/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://usn.ubuntu.com/3660-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1441941 - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubu
id=1441941 - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5160 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.989Z Vendors: Mozilla Products: Firefox Problem Types: Uninitialized memory use by WebRTC encoder Description: WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1436117 - http://www.securitytracker.com/id/1040
/advisories/mfsa2018-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1436117 - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5161 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.999Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird Problem Types: Hang via malformed headers Description: Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1726 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.debian
isories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://bugzilla.mozilla.org/show_bug.cgi?id=1411720
CVE ID: CVE-2018-5162 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.974Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird Problem Types: Encrypted mail leaks plaintext through src attribute Description: Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1726 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1
/www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://bugzilla.mozilla.org/show_bug.cgi?id=1457721 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - http://www.securityfocus.com/bid/104240
CVE ID: CVE-2018-5163 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.037Z Vendors: Mozilla Products: Firefox Problem Types: Replacing cached data in JavaScript Start-up Bytecode Cache Description: If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode Cache (JSBC) for other JavaScript code. If the parent process then runs this replaced code, the executed script would be run with the parent process' privileges, escaping the sandbox on content processes. This vulnerability affects Firefox < 60. Additional Analyst Not
' privileges, escaping the sandbox on content processes. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1426353 - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5164 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.998Z Vendors: Mozilla Products: Firefox Problem Types: CSP not applied to all multipart content sent with multipart/x-mixed-replace Description: Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type. This could allow for script to run where CSP should block it, allowing for cross-site scripting (XSS) and other attacks. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytrac
CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1416045
CVE ID: CVE-2018-5165 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.013Z Vendors: Mozilla Products: Firefox Problem Types: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox Description: In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to select this setting intending to activate it and inadvertently turn protections off. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Pro
it and inadvertently turn protections off. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1451452 - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5166 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.980Z Vendors: Mozilla Products: Firefox Problem Types: WebExtension host permission bypass through filterReponseData Description: WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic and access content from a host for which they do not have explicit user permission. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://bugzilla.mozilla.org/show_b
a.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://bugzilla.mozilla.org/show_bug.cgi?id=1437325 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5167 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.993Z Vendors: Mozilla Products: Firefox Problem Types: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger Description: The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks in their output. Web sites should not be able to directly link to internal chrome pages. Additionally, the JavaScript debugger will display "javascript:" links, which users could be tricked into clicking by malicious sites. This vulnerability affects Firefox < 60. Addition
links, which users could be tricked into clicking by malicious sites. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1447969
CVE ID: CVE-2018-5168 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.983Z Vendors: Mozilla Products: Thunderbird, Thunderbird ESR, Firefox, Firefox ESR Problem Types: Lightweight themes can be installed without user interaction Description: Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Cont
rbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040896 - https://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announc
s://www.debian.org/security/2018/dsa-4199 - https://usn.ubuntu.com/3645-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://bugzilla.mozilla.org/show_bug.cgi?id=1449548 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136