What’s Vulnerable › Vulnerabilities
CVE-2016-2818
- Severity: high (CVSS 8.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2016-06-13 · updated 2026-06-17
- Weakness: CWE-119
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
- Canonical Ubuntu Linux: 12.04, 14.04, 15.10, 16.04
- Debian Linux: 8.0
- Mozilla Firefox: through 46.0.1; 45.1.0, 45.1.1
- Novell Suse Linux Enterprise Desktop: 12.0, 12.0-sp1
- Novell Suse Linux Enterprise Server: 12.0, 12.0-sp1
- Novell Suse Linux Enterprise Software Development Kit: 12.0, 12.0-sp1
- Novell Suse Package Hub For Suse Linux Enterprise: 12
- openSUSE Leap: 42.1
- Opensuse: 13.1, 13.2
- RedHat Enterprise Linux Desktop: 5.0, 6.0, 7.0
- RedHat Enterprise Linux For Ibm Z Systems: 5.0, 6.0, 7.0
- RedHat Enterprise Linux For Ibm Z Systems Eus: 7.2
- RedHat Enterprise Linux For Power Big Endian: 5.0, 6.0, 7.0
- RedHat Enterprise Linux For Power Big Endian Eus: 7.2
- RedHat Enterprise Linux For Power Little Endian: 7.0
- RedHat Enterprise Linux For Power Little Endian Eus: 7.2
- RedHat Enterprise Linux For Scientific Computing: 6.0
- RedHat Enterprise Linux Server: 5.0, 6.0, 7.0
- RedHat Enterprise Linux Server Aus: 7.2
- RedHat Enterprise Linux Server Eus: 7.2
- RedHat Enterprise Linux Workstation: 5.0, 6.0, 7.0
References
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3600
- http://www.debian.org/security/2016/dsa-3647
- http://www.mozilla.org/security/announce/2016/mfsa2016-49.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.securityfocus.com/bid/91075
Get alerted when CVE-2016-2818 or the next vulnerability affects your stack