AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-5598

HIGH · CVSS 8.3 EPSS 2.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-10-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-5598
Severity
HIGH
CVSS
8.3
EPSS
2.94%
Chrome Firefox Java

Original NVD Description

PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.