CVE-2016-2818

HIGH 8.8CVE-2016-2818 · Published 13/06/2016 · updated 17/06/2026

In short

CVE-2016-2818 is a HIGH (CVSS 8.8) vulnerability affecting firefox (mozilla), suse linux enterprise software development kit (novell), suse package hub for suse linux enterprise (novell).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`= 45.1.0= 45.1.1≤ 46.0.1`	No fix yet
suse linux enterprise software development kit novell	`= 12.0`	No fix yet
suse package hub for suse linux enterprise novell	`= 12`	No fix yet

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html · Third Party Advisory
debian.org/security/2016/dsa-3600 · Third Party Advisory
debian.org/security/2016/dsa-3647
mozilla.org/security/announce/2016/mfsa2016-49.html · Vendor Advisory
oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free