CVE-2018-12406

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.

• CWE-119

• http://www.securityfocus.com/bid/106167Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456947%2C1475669%2C1504816%2C1502886%2C1500064%2C1500310%2C1500696%2C1499198%2C1434490%2C1481745%2C1458129Exploit, Issue Tracking, Vendor Advisory
• https://usn.ubuntu.com/3844-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-29/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/106167Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456947%2C1475669%2C1504816%2C1502886%2C1500064%2C1500310%2C1500696%2C1499198%2C1434490%2C1481745%2C1458129Exploit, Issue Tracking, Vendor Advisory
• https://usn.ubuntu.com/3844-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-29/Exploit, Vendor Advisory

Published

Feb 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12400In private browsing mode on Firefox for Android, favicons ar…
• CVE-2018-12401Some special resource URIs will cause a non-exploitable cras…
• CVE-2018-12402The internal WebBrowserPersist code does not use correct ori…
• CVE-2018-12403If a site is loaded over a HTTPS connection but loads a favi…
• CVE-2018-12404A cached side channel attack during handshakes using RSA enc…
• CVE-2018-12405Mozilla developers and community members reported memory saf…
• CVE-2018-12407A buffer overflow occurs when drawing and validating element…
• CVE-2018-12408The BusinessWorks engine component of TIBCO Software Inc.'s …7.5
• CVE-2018-12409The SOAP Admin API component of TIBCO Software Inc.'s TIBCO …
• CVE-2018-1241Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoi…
• CVE-2018-12410The web server component of TIBCO Software Inc's Spotfire St…9.8
• CVE-2018-12411The administrative daemon (tibdgadmind) of TIBCO Software In…7.5