{
  "fix": "firefox 57.0.1\u002Bbuild2-0ubuntu1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-57.0.1-build2-0ubuntu1",
  "summary": "firefox 57.0.1\u002Bbuild2-0ubuntu1, released June 11, 2018, fixes 16 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "firefox 57.0.1\u002Bbuild2-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2018-06-11T14:29:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 16 CVEs, none high severity",
  "supported": false,
  "cveCount": 16,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.072,
  "appliesTo": [
    {
      "product": "firefox",
      "productUrl": "https://patchblox.com/security/product/linux/firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "57.0.1\u002Bbuild2-0ubuntu1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2017-7828",
      "url": "https://patchblox.com/security/cve/CVE-2017-7828",
      "title": "xul-ext-calendar-timezones: A use-after-free vulnerability can occur when flushing and resizing layout because the \u0022PressShell\u0022 object has been f...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.072,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7826",
      "url": "https://patchblox.com/security/cve/CVE-2017-7826",
      "title": "firefox: Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7843",
      "url": "https://patchblox.com/security/cve/CVE-2017-7843",
      "title": "firefox: When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerp...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02892,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7827",
      "url": "https://patchblox.com/security/cve/CVE-2017-7827",
      "title": "firefox: Memory safety bugs were reported in Firefox 56",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02733,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7830",
      "url": "https://patchblox.com/security/cve/CVE-2017-7830",
      "title": "firefox: The Resource Timing API incorrectly revealed navigations in cross-origin iframes",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7844",
      "url": "https://patchblox.com/security/cve/CVE-2017-7844",
      "title": "firefox: A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7831",
      "url": "https://patchblox.com/security/cve/CVE-2017-7831",
      "title": "firefox: A vulnerability where the security wrapper does not deny access to someexposed properties using the deprecated \u0022_expo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01557,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7842",
      "url": "https://patchblox.com/security/cve/CVE-2017-7842",
      "title": "firefox: If a document\u0027s Referrer Policy attribute is set to \u0022no-referrer\u0022 sometimes two network requests are made for \u0022\u0026lt;li...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01513,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7834",
      "url": "https://patchblox.com/security/cve/CVE-2017-7834",
      "title": "firefox: A \u0022data:\u0022 URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing fo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7835",
      "url": "https://patchblox.com/security/cve/CVE-2017-7835",
      "title": "firefox: Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for re...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7832",
      "url": "https://patchblox.com/security/cve/CVE-2017-7832",
      "title": "firefox: The combined, single character, version of the letter \u0027i\u0027 with any of the potential accents in unicode, such as acute...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01483,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7833",
      "url": "https://patchblox.com/security/cve/CVE-2017-7833",
      "title": "firefox: Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the n...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7837",
      "url": "https://patchblox.com/security/cve/CVE-2017-7837",
      "title": "firefox: SVG loaded through \u0022\u0026lt;img\u0026gt;\u0022 tags can use \u0022\u0026lt;meta\u0026gt;\u0022 tags within the SVG data to set cookies for that page",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7838",
      "url": "https://patchblox.com/security/cve/CVE-2017-7838",
      "title": "firefox: Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-d...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7839",
      "url": "https://patchblox.com/security/cve/CVE-2017-7839",
      "title": "firefox: Control characters prepended before \u0022javascript:\u0022 URLs pasted in the addressbar can cause the leading characters to b...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7840",
      "url": "https://patchblox.com/security/cve/CVE-2017-7840",
      "title": "firefox: JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in save...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}