Security Advisory

CVE-2016-9075

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-06-11 21:00:00

Last updated 2024-08-06 02:42:10

Assigner mozilla

State PUBLISHED

Description

An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 50.

← Browse all CVEs View on cve.org ↗