CVE-2016-5293: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox ESR < 45.5 and Firefox < 50.

Affected products

• Debian Debian Linux: version 8.0 only
• Mozilla Firefox: before 45.5.0 (fixed in 45.5.0); before 50.0 (fixed in 50.0)

Published 2018-06-11. Last modified 2026-06-17.