CVE-2016-9072

ALTO 7.5CVE-2016-9072 · Published 11/06/2018 · updated 17/06/2026

In breve

CVE-2016-9072 è una vulnerabilità ALTO (CVSS 7.5) che riguarda firefox (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.6% delle vulnerabilità.
Correzione: aggiornare a 50.0 o successiva.

Package	Affected versions	Patched versions
firefox mozilla	`< 50.0`	`50.0`

Description

When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50.

References

securityfocus.com/bid/94337 · Third Party Advisory
securitytracker.com/id/1037298 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2016-89 · Vendor Advisory

Altre vulnerabilità di firefox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 50.0

50.0

Altre vulnerabilità di firefox

Vedi tutto →