CVE-2016-9076: Mozilla Firefox

Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox < 50.

Affected products

• Mozilla Firefox: before 50.0 (fixed in 50.0)

Published 2018-06-11. Last modified 2026-06-17.