CVE-2015-4495: Mozilla Firefox Security Feature Bypass Vulnerability
Vulnerability summary
CVE-2015-4495 is a high (CVSS 8.8) Origin Validation Error vulnerability in Mozilla Firefox. It is known to be exploited: CISA lists it, first on 25-05-2022. EPSS estimates a 68.56% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 08-08-2015PublishedVulnerability first disclosed.
- 25-05-2022Added to CISA KEVMozilla Firefox Security Feature Bypass Vulnerability
- 15-06-2022CISA remediation dueApply updates per vendor instructions.
- 21-10-2025Last modifiedVulnerability information updated.
Description
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
CVSS metrics
5 scores · 4 sources · 2 versions- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
68.56%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
-2.79 pp
From 71.34% on 18-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 25-05-2022
- Federal due date
- 15-06-2022
CISA required action
Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2015-4495
Public exploits
2 foundMozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy
Maturity: poc
Firefox PDF.js Browser File Theft
auxiliary/gather/firefox_pdfjs_file_theft
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse17 products
- MozillaFirefox&distro=SUSE Linux Enterprise Desktop 11 SP3< 31.8.0esr-0.13.2
- MozillaFirefox&distro=SUSE Linux Enterprise Desktop 11 SP4< 31.8.0esr-0.13.2
- MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12< 31.8.0esr-40.1
- MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP3< 31.8.0esr-0.13.2
- MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 31.8.0esr-0.13.2
Redhat8 products
- enterprise_linux_desktop5.0 | 6.0 | 7.0
- enterprise_linux_eus6.7 | 7.1 | 7.2 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7
- enterprise_linux_server5.0 | 6.0 | 7.0
- enterprise_linux_server_aus7.3 | 7.4 | 7.6 | 7.7
- enterprise_linux_server_tus7.3 | 7.6 | 7.7
Mageia4 products
- firefox< 38.1.1-1.mga4
- firefox-l10n< 38.1.1-1.mga4
- firefox< 38.1.1-1.mga5
- firefox-l10n< 38.1.1-1.mga5
Mozilla2 products
- firefox< 39.0.3 | ≥ 38.0, < 38.1.1
- firefox_os< 2.2
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.04
Debian1 product
- pdf.js< 1.1.366+dfsg-1
Opensuse1 product
- opensuseEOL13.1 | 13.2
Oracle1 product
- solarisEOL11.3
Ubuntu1 product
- firefox< 39.0.3+build2-0ubuntu0.14.04.1
9 vendors · 36 products
References
40 links- lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMPatchThird Party Advisory
Show all 40 references
- lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/X Refsource CONFIRMIssue TrackingVendor AdvisoryARTICLE
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4495Government ResourceUS Government Resource
- bugzilla.suse.com/940918REPORT
