A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2018-10-18T13:00:00

Updated: 2024-08-05T08:30:59.673Z

Reserved: 2018-06-14T00:00:00

Link: CVE-2018-12360

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-10-18T13:29:00.853

Modified: 2024-11-21T03:45:02.880

Link: CVE-2018-12360

cve-icon Redhat

Severity : Critical

Publid Date: 2018-06-26T00:00:00Z

Links: CVE-2018-12360 - Bugzilla