CVE-2016-5288: Mozilla Firefox

Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days.

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

Affected products

• Mozilla Firefox: before 49.0.2 (fixed in 49.0.2)

Published 2018-06-11. Last modified 2026-06-17.