CVE-2018-12381: Mozilla Firefox

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.

Affected products

• Mozilla Firefox: before 60.2.0 (fixed in 60.2.0); before 62.0 (fixed in 62.0)

Published 2018-10-18. Last modified 2026-06-17.