AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-5295

HIGH · CVSS 7.8 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-11 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Windows, Firefox.

CVE
CVE-2016-5295
Severity
HIGH
CVSS
7.8
EPSS
0.33%
Windows Firefox

Original NVD Description

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.

Related CVEs

Other vulnerabilities affecting the same vendor(s)