CVE-2018-5140: Canonical Ubuntu Linux

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox < 59.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 17.10 only
• Mozilla Firefox: before 59.0 (fixed in 59.0)

Published 2018-06-11. Last modified 2026-06-17.