cvedb.io
CVE-2018-12386
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2018-10-18T13:29:06.273 · Last modified 2026-06-17T01:37:40.860

Summary

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

Affected products

redhat — enterprise_linux_desktop

Does this affect you?

Add your gear to cvedb and we'll alert you only when redhat ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.