CVE-2018-12381: mozilla firefox
Vulnerability summary
CVE-2018-12381 is a medium (CVSS 5.3) vulnerability in mozilla firefox. EPSS estimates a 1.84% chance of exploitation in the next 30 days, higher than 78.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 18-10-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.84%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
-0.19 pp
From 2.03% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla2 products
- firefox≥ unspecified, < 62 | < 60.2.0 | < 62.0
- firefox_esr≥ unspecified, < 60.2
1 vendor · 2 products