{
  "cveId": "CVE-2018-12365",
  "url": "https://patchblox.com/security/cve/CVE-2018-12365",
  "summary": "CVE-2018-12365 is fixed in 12 products on 1 platform, first by firefox 61.0\u002Bbuild3-0ubuntu0.18.04.1, released June 26, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file syst...",
  "description": "A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird \u0026lt; 60, Thunderbird \u0026lt; 52.9, Firefox ESR \u0026lt; 60.1, Firefox ESR \u0026lt; 52.9, and Firefox \u0026lt; 61.",
  "published": "2018-06-26T17:00:00Z",
  "severity": "Medium",
  "epss": 0.03158,
  "epssPercentile": 0.8805,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-testsuite 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "thunderbird 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "thunderbird-globalmenu 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-globalmenu-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-gnome-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "thunderbird-gnome-support 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-gnome-support-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "thunderbird-mozsymbols 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-mozsymbols-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "thunderbird-testsuite 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-testsuite-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-calendar-timezones",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "xul-ext-calendar-timezones 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-calendar-timezones-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-gdata-provider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "xul-ext-gdata-provider 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-gdata-provider-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-lightning",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "xul-ext-lightning 1:52.9.1\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-lightning-1-52.9.1-build3-0ubuntu0.18.04.1",
      "released": "2018-07-04T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}