cveboard RSS feed

CVE-2018-12363

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Thunderbird

Vendor
Mozilla
Product
Thunderbird
Platforms
Unknown
Default status
Unknown
Thunderbird · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom60UnavailableNone listed
unspecifiedaffectedcustom52.9UnavailableNone listed

Firefox ESR

Vendor
Mozilla
Product
Firefox ESR
Platforms
Unknown
Default status
Unknown
Firefox ESR · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom60.1UnavailableNone listed
unspecifiedaffectedcustom52.9UnavailableNone listed

Firefox

Vendor
Mozilla
Product
Firefox
Platforms
Unknown
Default status
Unknown
Firefox · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom61UnavailableNone listed