Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restritions, or execute arbitrary code. (CVE-2018-12405, CVE-2018-12406, CVE-2018-12407, CVE-2018-17466, CVE-2018-18492, CVE-2018-18493, CVE-2018-18494, CVE-2018-18498)
Multiple security issues were discovered in WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to open privileged pages, or bypass other security restrictions. (CVE-2018-18495, CVE-2018-18497)
{ "binaries": [ { "binary_version": "64.0+build3-0ubuntu0.14.04.1", "binary_name": "firefox" }, { "binary_version": "64.0+build3-0ubuntu0.14.04.1", "binary_name": "firefox-dev" }, { "binary_version": "64.0+build3-0ubuntu0.14.04.1", "binary_name": "firefox-globalmenu" }, { "binary_version": "64.0+build3-0ubuntu0.14.04.1", "binary_name": "firefox-mozsymbols" }, { "binary_version": "64.0+build3-0ubuntu0.14.04.1", "binary_name": "firefox-testsuite" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "64.0+build3-0ubuntu0.16.04.1", "binary_name": "firefox" }, { "binary_version": "64.0+build3-0ubuntu0.16.04.1", "binary_name": "firefox-dev" }, { "binary_version": "64.0+build3-0ubuntu0.16.04.1", "binary_name": "firefox-globalmenu" }, { "binary_version": "64.0+build3-0ubuntu0.16.04.1", "binary_name": "firefox-mozsymbols" }, { "binary_version": "64.0+build3-0ubuntu0.16.04.1", "binary_name": "firefox-testsuite" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "64.0+build3-0ubuntu0.18.04.1", "binary_name": "firefox" }, { "binary_version": "64.0+build3-0ubuntu0.18.04.1", "binary_name": "firefox-dev" }, { "binary_version": "64.0+build3-0ubuntu0.18.04.1", "binary_name": "firefox-globalmenu" }, { "binary_version": "64.0+build3-0ubuntu0.18.04.1", "binary_name": "firefox-mozsymbols" }, { "binary_version": "64.0+build3-0ubuntu0.18.04.1", "binary_name": "firefox-testsuite" } ], "availability": "No subscription required" }