Vulnerabilities

TI-2017-05447 CVE-2017-7830 · GHSA-6j6p-p8wc-9jpp

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.

LOW 33

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02404 Published 2018-06-11 Fixed in 57, 52.5

TI-2017-05445 CVE-2017-7828 · GHSA-f749-pqmw-rvhp

MEDIUM 52

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.072 Published 2018-06-11 Fixed in 57, 52.5 CWE-416

TI-2017-05443 CVE-2017-7826 · GHSA-9g7r-5p3c-g4qg

MEDIUM 48

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03335 Published 2018-06-11 Fixed in 57, 52.5 CWE-119