CVE-2018-5186

Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 61.

• CWE-119

• http://www.securityfocus.com/bid/104557Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041193Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1464872%2C1463329%2C1419373%2C1412882%2C1413033%2C1444673%2C1454448%2C1453505%2C1438671Exploit, Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201810-01Third Party Advisory
• https://usn.ubuntu.com/3705-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-15/Vendor Advisory
• http://www.securityfocus.com/bid/104557Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041193Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1464872%2C1463329%2C1419373%2C1412882%2C1413033%2C1444673%2C1454448%2C1453505%2C1438671Exploit, Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201810-01Third Party Advisory
• https://usn.ubuntu.com/3705-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-15/Vendor Advisory

Published

Oct 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5180A use-after-free vulnerability can occur during WebGL operat…
• CVE-2018-5181If a URL using the "file:" protocol is dragged and dropped o…
• CVE-2018-5182If a text string that happens to be a filename in the operat…
• CVE-2018-5183Mozilla developers backported selected changes in the Skia l…
• CVE-2018-5184Using remote content in encrypted messages can lead to the d…
• CVE-2018-5185Plaintext of decrypted emails can leak through by user submi…
• CVE-2018-5187Memory safety bugs present in Firefox 60 and Firefox ESR 60.…
• CVE-2018-5188Memory safety bugs present in Firefox 60, Firefox ESR 60, an…
• CVE-2018-5189Race condition in Jungo Windriver 12.5.1 allows local users …
• CVE-2018-5190PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B …
• CVE-2018-5191Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-5195Hancom NEO versions 9.6.1.5183 and earlier have a buffer Ove…