VULNERABILITY INTELLIGENCE
CVE-2015-0818
CVSS score7.5 HIGH
EPSS probability3.15%
CISA KEVNot currently listed
Published2015-03-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.