CVE-2018-5159

highpriority · attend · 56EPSS 0.206 · 98 %ileexploit · functionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · functional

Likely / severe?

20.6% (98th) EPSS

CVSS 7.5 · high

Is it mine?

175 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · redhat_csaf

EPSS · scored 2026-10-27

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-debuginfo-0:52.8.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1414
Fixedfirefox-0:52.8.0-1.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedfirefox-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
https://access.redhat.com/errata/RHSA-2018:1415
Fixedthunderbird-0:52.8.0-1.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-debuginfo-0:52.8.0-1.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1725
Fixedthunderbird-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726
Fixedthunderbird-debuginfo-0:52.8.0-2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2018:1726

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.09.3criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

v3.17.5highAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-190USprimaryCWE-787USprimaryCWE-119USCWE-190US

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-44759Skia and Firefox - Integer Overflow in SkTDArray Leading to Out-of-Bounds Writefunctional · exploit_db

affected products (175)

Products and version ranges known to be affected.

Mozilla Firefoxunspecified → 60enisa_euvdEU
Mozilla Firefox ESRunspecified → 52.8enisa_euvdEU
Mozilla Thunderbirdunspecified → 52.8enisa_euvdEU
Mozilla Thunderbird ESRunspecified → 52.8enisa_euvdEU
Canonical Ltd. Ubuntu≤ 14.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 17.10fstec_bduRU
Canonical Ltd. Ubuntu≤ 16.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 18.04 LTSfstec_bduRU
Mozilla Corp. Firefox≤ 60fstec_bduRU
Mozilla Corp. Firefox ESR≤ 52.8fstec_bduRU
Mozilla Corp. Thunderbird≤ 52.8fstec_bduRU
Mozilla Corp. Thunderbird ESR≤ 52.8fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 42.3fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.0fstec_bduRU
Novell Inc. SUSE Enterprise Storage≤ 4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Module for Desktop Applications≤ 15 SP1fstec_bduRU
Novell Inc. SUSE Linux Enterprise Module for Desktop Applications≤ 15fstec_bduRU
Novell Inc. SUSE Linux Enterprise Point of Sale≤ 11 SP3fstec_bduRU
Novell Inc. SUSE Linux Enterprise Point of Sale≤ 12 SP2-CLIENTfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12-LTSSfstec_bduRU

showing 20 of 175

advisories (4)

Vendor and ecosystem advisories describing this.

RHSA-2018:1414Red Hat Security Advisory: firefox security update2018-05-14csaf · redhat_csafUS
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2018:1415Red Hat Security Advisory: firefox security update2018-05-14csaf · redhat_csafUS
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2018:1725Red Hat Security Advisory: thunderbird security update2018-05-24csaf · redhat_csafUS
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2018:1726Red Hat Security Advisory: thunderbird security update2018-05-24csaf · redhat_csafUS
An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu redhat_csaf NVD CVE.org MITRE

published 2018-06-11modified 2026-06-17

related (20,428)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-86950US	—OT critical	26.2% (98th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1,…
CVE-2026-87491US	—OT critical	3.51% (89th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	2026-07-04
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc…
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-11645US	—OT critical	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…

+20423 more

references (60)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan