CVE-2018-5179

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 60.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
bionic
Fixed 70.0.3538.67-0ubuntu0.18.04.1
released
cosmic
Fixed 70.0.3538.67-0ubuntu0.18.10.1
released
trusty
dne
xenial
Fixed 70.0.3538.67-0ubuntu0.16.04.1
released
oxide-qt
bionic
dne
cosmic
dne
trusty
dne
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP1
68.2.0-109.95.2
fixed
suse enterprise sap 12 SP4
68.2.0-109.95.2
fixed
suse enterprise sap 12 SP5
68.2.0-109.95.2
fixed
suse enterprise server 12 SP1
68.2.0-109.95.2
fixed
suse enterprise server 12 SP2
68.2.0-109.95.2
fixed
suse enterprise server 12 SP3
68.2.0-109.95.2
fixed
suse enterprise server 12 SP4
68.2.0-109.95.2
fixed
suse enterprise server 12 SP5
68.2.0-109.95.2
fixed
MozillaFirefox-devel
suse enterprise sap 12 SP1
68.2.0-109.95.2
fixed
suse enterprise server 12 SP1
68.2.0-109.95.2
fixed
suse enterprise server 12 SP2
68.2.0-109.95.2
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP1
68.2.0-109.95.2
fixed
suse enterprise sap 12 SP4
68.2.0-109.95.2
fixed
suse enterprise sap 12 SP5
68.2.0-109.95.2
fixed
suse enterprise server 12 SP1
68.2.0-109.95.2
fixed
suse enterprise server 12 SP2
68.2.0-109.95.2
fixed
suse enterprise server 12 SP3
68.2.0-109.95.2
fixed
suse enterprise server 12 SP4
68.2.0-109.95.2
fixed
suse enterprise server 12 SP5
68.2.0-109.95.2
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
chromium-browser
RHEL 6
0:70.0.3538.67-1.el6_10
fixed