{
  "cveId": "CVE-2018-18495",
  "url": "https://patchblox.com/security/cve/CVE-2018-18495",
  "summary": "CVE-2018-18495 is fixed in 4 products on 1 platform, first by firefox 64.0\u002Bbuild3-0ubuntu0.18.04.1, released December 10, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions g...",
  "description": "WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox \u0026lt; 64.",
  "published": "2018-12-10T16:00:00Z",
  "severity": "Medium",
  "epss": 0.01931,
  "epssPercentile": 0.80137,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-64.0-build3-0ubuntu0.18.04.1",
      "released": "2018-12-10T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-64.0-build3-0ubuntu0.18.04.1",
      "released": "2018-12-10T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-64.0-build3-0ubuntu0.18.04.1",
      "released": "2018-12-10T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-testsuite 64.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-64.0-build3-0ubuntu0.18.04.1",
      "released": "2018-12-10T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}