CVE-2018-5118

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

• CWE-200

• http://www.securityfocus.com/bid/102786Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040270Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1420049Issue Tracking
• https://usn.ubuntu.com/3544-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-02/Vendor Advisory
• http://www.securityfocus.com/bid/102786Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040270Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1420049Issue Tracking
• https://usn.ubuntu.com/3544-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-02/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5112Development Tools panels of an extension are required to loa…
• CVE-2018-5113The "browser.identity.launchWebAuthFlow" function of WebExte…
• CVE-2018-5114If an existing cookie is changed to be "HttpOnly" while a do…
• CVE-2018-5115If an HTTP authentication prompt is triggered by a backgroun…
• CVE-2018-5116WebExtensions with the "ActiveTab" permission are able to ac…
• CVE-2018-5117If right-to-left text is used in the addressbar with left-to…
• CVE-2018-5119The reader view will display cross-origin content when CORS …
• CVE-2018-5121Low descenders on some Tibetan characters in several fonts o…
• CVE-2018-5122A potential integer overflow in the "DoCrypt" function of We…
• CVE-2018-5123A third party website can access information available to a …
• CVE-2018-5124Unsanitized output in the browser UI leaves HTML tags in pla…
• CVE-2018-5125Memory safety bugs were reported in Firefox 58 and Firefox E…