AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-5157

HIGH · CVSS 7.5 EPSS 1.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-5157
Severity
HIGH
CVSS
7.5
EPSS
1.64%
Firefox

Original Filing — NVD Description

Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an authenticated user on a third-party website. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.