CVE-2016-5288

5.9 mediumEPSS 1.7%

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://www.securityfocus.com/bid/93810
http://www.securitytracker.com/id/1037077
https://bugzilla.mozilla.org/show_bug.cgi?id=1310183
https://www.mozilla.org/security/advisories/mfsa2016-87/
http://www.securityfocus.com/bid/93810

Check your stack JSON