CVE-2018-5179

7.5 highEPSS 1.7%

High (7.5) in mozilla firefox. EPSS 1.7% chance of exploitation in the next 30 days.

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2019-04-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/
https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/

Check your stack JSON