VULNERABILITY INTELLIGENCE

CVE-2018-5179

CVSS score7.5 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2019-04-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

Weakness classification

  • CWE-772: Missing Release of Resource after Effective Lifetime

Primary references