AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-1967

MEDIUM · CVSS 6.5 EPSS 2.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-03-13 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It affects Firefox, Java. It may be remotely exploitable.

CVE
CVE-2016-1967
Severity
MEDIUM
CVSS
6.5
EPSS
2.25%
Firefox Java

Original NVD Description

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.